{"report_id":"4315f33a-05bc-4833-8282-39e3429f1680","version":0,"status":"done","tags":[],"date":"2026-08-13T18:19:49Z","url":{"schema":"http","addr":"rainbet-winner.com/","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-winner.com/","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"title":"Rainbet Casino Canada – Crypto Games, Sports \u0026 Fast Payouts","dom":{"size":1662894,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64341)","md5":"e7c2732534d200b79ce71ce7de6a199a","sha1":"0bd771a080ab6d2a4508dd896d6593f33593c041","sha256":"64f88d6cab9ebba1c8fbdcb17d2f97fc030ec133006d1ee0dcdae05ad32ac491","sha512":"baaa0fdccfc0a9205dff5ae041962952a82cb34728c66efd0ed255bfeb20e1e27663e3dae303572e1641abcd3418a363c822d566ad561fb1bd106423f8708648","ssdeep":"12288:NxGhclrUrkTh4/Bs28WbRkWyi61Pxe4bd1E8WbRkWyi61Pxe4bd53mVbsPIsIsqh:OsEsQsIsqsisQsLsost","tlshash":"107577f622001a78083777c8a820f96dd31f626def6bca6d61b5ca11f2d5ae5440df78","dom_hash":"domhashd63c2c50f9e396165d926d6901929aea","first_seen":"2026-08-13T18:05:16.984661Z","last_seen":"2026-08-13T18:19:57.915221Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-winner.com/","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:19:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"b2ba2232-9d9f-4eed-868f-62dfae496dd4.snippet.anjcdn.org","ip":{"addr":"65.9.46.126","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-12-01T11:27:46.967711Z","last_seen":"2026-08-12T01:19:35.223217Z","alert_count":0,"request_count":1,"received_data":575,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":8392,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbet-winner.com","ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-13T18:05:08.356037Z","last_seen":"2026-08-13T18:05:08.356037Z","alert_count":130,"request_count":130,"received_data":13544649,"sent_data":68804,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":154276,"sent_data":2288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.rbgcdn.com","ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2026-04-29T08:38:17.641066Z","last_seen":"2026-08-12T01:19:35.034242Z","alert_count":0,"request_count":7,"received_data":11088,"sent_data":4044,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-winner.com/assets/app.js","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8243e92697221bba16018a3df3ac4012","sha1":"5bc7d20b1ad11e0774b886436a4882185915edf2","sha256":"a98456d53a6d6f1b9d8dbd172214adfeb677ee7ba3670fe6f9f0c21588b48a98","sha512":"8072100110c6a76d15c96dcf77dc5fc2b066c4a0376e9be8cf7bc663f4f95c9c89b43550cf9421cac47a513033635ff490142a03088597ee2a55d22805120906","ssdeep":"192:ubNef5MPChNEMa7irqJEc7ma+/NscnZf3uMVHvJooZOTWHa9gq:L5tvNrqJcJN/FBoowTWu","tlshash":"7322a56af6201d7600f206eba5c89af8b96e05d9f107a09978bdcc4d0b41dc319776fb","size":10067,"data":"","first_seen":"2026-08-12T01:19:43.375487Z","last_seen":"2026-08-13T18:19:57.97978Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/59347b2ff1831bd2.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.806Z","timestamp":1786645096806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/59347b2ff1831bd2.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2162\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2By6dBoj9HvlToqrwLYbERQomWHZFkHjC2PfMRMqX4XPDbdyYyL3T6T038TxDlDmih7%2BZOHyNcB3o07z285%2FAcbB7a6NYh66kHNCoF0YsGEaY5hoicCFetPqt%2F3SlM8KfCCvmEA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af09d47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8546,"size_decoded":2820,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1a3052592f6e968806027c382e6c68e","sha1":"1711c6a92ee32240f848a305ec369cc0f44bec6a","sha256":"d3c158ea69c7def80f2d30eeb8041a02b89d7b93c98ea922fde821e5929ac6b1","sha512":"95e73cfcab53d5d8e99f378ba2bc1aa4fcc3342859a1d2c543dea86685c23e1b3410cbbe70d255af0f038f79e3057ccab69ff6f9a8423e87a766259ccd9eab3a","ssdeep":"96:z/oK9zCtpFM2ylHMleXYy40okc07sAXzjFSgq4n8014yinMx41IbF:z/ogzkrxYRnNAgsqF","tlshash":"1f0242d17304f0549d34c2ad4e2e24fa616a28e4fd51e7c2dba6b95b31c24ca2cecdc9","first_seen":"2025-08-21T09:17:26.229033Z","last_seen":"2026-08-13T18:19:57.918472Z","times_seen":91,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2337a26488dea655.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.820Z","timestamp":1786645096820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2337a26488dea655.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-7b14\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqHqROVtyeAI1g8gDlD0CnRigufJofC%2BJraK2w3h9Bpr0UwgZ%2B3syf0tONXR%2FZxYRPQVRdo5ncKx5ywZKSUy6fla8EjZ7vShXHwojgBZpOyxCUWob8mzzDgagOsvS3SkvqFGw08%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19de7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31508,"size_decoded":14097,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bd7c11bb89501fb72de6082b743fd33","sha1":"bf4e1fe4529a179c2452d1700a537546e4641c0d","sha256":"beb15eb5655298dc0076e3385ce3276737608607f149c5c6d0ea8ecce16236a9","sha512":"8af1df127b7729333366065f43bc4a4c7af021ff5b75df0a81ada951c397ce5cf0ab9a999f080ee1fd2e29af37eccf26e6801e3ce61b22cf55bfa388c34ed528","ssdeep":"768:Enwnzy8COWRk9NqY4dsRxX7Th50UDlyshVo4H:EwWiFLcCP","tlshash":"70e2e9d037b593fcf541f3f9da23a4a1be5638e8b6448569c3a52c11e4430689faacd3","first_seen":"2026-06-07T03:39:13.691113Z","last_seen":"2026-08-13T18:19:57.919876Z","times_seen":14,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4d64d3202186d541.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.868Z","timestamp":1786645096868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4d64d3202186d541.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2027\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJFP72BHg%2BCqzWXP8xOlEaNlKz%2FnUDDzBvT%2FpRneU2mjMnCck518d3CD2zVXyh7yI5hqs4fmUzb6iYdRp81nuKwlLJG%2FUi61ActTGKirN3ahN7OZrOpA2ZPIe5xXlTMZSgSxkgc%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69f87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8231,"size_decoded":3884,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b95410b8f993b3f0c3dc996f35ec2c7","sha1":"2e9b54c1f33548177e1e7d0fb05e5e8f0fd9e473","sha256":"1394d68b5857f6b43a98fe22448ab296e21af434a50d7d2b7b0f2ff1932b3751","sha512":"7e4a7fc4d58846070fa15798a45e2b8931986e4c68c2fc1d7db3ea2d73868f1822472d7947fc7a98b5e97cb6a50ebf52ec7f5e77d4892233af1061f3382932b4","ssdeep":"192:onL0O0C4hevmZqYQKF4GTe9zopTIdYTDxRin3qvb0S1p:I4O0C4hevmIKvwsCWTDS3qD","tlshash":"7302a5d4277482e8f406e2fedb3a15f57d7328eaa5418510c3742c1ea84643dad89fe7","first_seen":"2025-04-11T16:57:52.658212Z","last_seen":"2026-08-13T18:19:57.923039Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.638Z","timestamp":1786645097638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-winner.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519068\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-13T21:46:43.785015Z","times_seen":549097,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4d04e31fb0651288.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.778Z","timestamp":1786645096778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4d04e31fb0651288.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-10e0\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8K8svmUKlkXs3Q81yVQhuDCw%2BxBTXef6jg94XkLHVueayipEfPN26OdIFdFx%2BSvYA2%2FWpXB21EWjWwK3RwHE%2BlGbX1%2FuR%2BJIRBesJALUZUFAv5MXclhmEC4jtOcsi3%2FEINyeJ0%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aed9bd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4320,"size_decoded":2366,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9e492227d820ed75e95e09b6fa67819","sha1":"71279a58379f57d7355178416c76a681e98c510e","sha256":"493d4ea12afc62cfb378d48afa10aa21e07ee32157e1db6cb37a62ea82af81b0","sha512":"29da40b0726d4de3c7d0af7ea3308f505128b36e5b1c775e30e00de6b3b0c0157f070d8d1b33ca937a49cf17a6061f6b78fa0fcf7ed203842692a21e82aa28a9","ssdeep":"96:RYW+cS7NZQKGpf5WxQcgjTM09wZnTxMHQRalzPwsl5i7jPDw6W:RP+cDRWycATMtZnTQQm9nQXwD","tlshash":"c99160e43b3c81f6bd16d2db0b67227baada20e18b49c414c7151e2f7d5a00d0cd6ada","first_seen":"2025-04-09T06:18:07.601046Z","last_seen":"2026-08-13T20:36:53.627031Z","times_seen":413,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c2b3fcacadc70be3.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.851Z","timestamp":1786645096851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c2b3fcacadc70be3.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-24e4\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlYCDsarcDG4DRxQkpt1ZJj0Ffknip19wgE46Ad7aJk5qBkCYVrUYQlOSWRVHCuX14WtXs2MDxDMDbwJZYK9FgQKqcsGVZp5mMzdPLUS9oVoPY9uESCa5enWuRZnvhCAj0%2Bu8xY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af49ed7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9444,"size_decoded":4713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e946405297aa11425de7bc57ddd1a13","sha1":"03899e73f9b11e04f5676a2d9697bc64d83399cc","sha256":"600c6ce07a79fbac1d80e672ed755a7eb7fd969a2b33aa2658b2b12c4ba07dd5","sha512":"5034dc802f9767b24f371b72012604835b63de15ae5febd800f9f34ee4e93bb0fbbc80f229c80a8e6f9853c241ee7970fa3864338c40ccc516d90977d45a8da9","ssdeep":"192:I0L7LdhADCfWmJomMpbT60URDr3LI3pn2P63BOdA8KTBthu3vV:pLdZe4ObW0UlL4oy3028oBth4","tlshash":"5612b5c83b7e42fdb850f6fad112a8353d1a58faad838075c3951d19e58684cceb4ca7","first_seen":"2025-06-29T11:27:30.16894Z","last_seen":"2026-08-13T18:19:57.926836Z","times_seen":90,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/landing-pages/icons/affilka-race-yellow.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.165Z","timestamp":1786645097165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/landing-pages/icons/affilka-race-yellow.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 684\r\ndate: Wed, 12 Aug 2026 16:32:34 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:32:34 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"cdb124ac4fcaa3ea36beddf9e9c607f2\"\r\nx-cpu-on-cache-miss: 169\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: 531d69e4-14d6-42e1-9e31-12818ce37d1f\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: nEsNELX7aiCLds0-Qrwm7fHf4S-jTduh-xKSpVNFi1189TOIPedRZA==\r\nage: 92743\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":684,"size_decoded":1537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdb124ac4fcaa3ea36beddf9e9c607f2","sha1":"b9c50e7438b87ec0e2554029f5f6616886ae1e60","sha256":"eaddaf03f3f62efaef75eadd63f8b45319607085a6627d589e1851d46e45d2be","sha512":"9e13345c76b28e8ea1e9cf571708fefe8f57dc91e5a789b95c7ab69787a0b63918ee144c4b6bfab3ef10abef11bf76d61713db6fb83eccaca87748edcd08851b","ssdeep":"","tlshash":"7c01885056fc6dcb58057f3c6d7e02401ab795ffca008a8f8175891308ad06317f7622","first_seen":"2026-05-05T05:48:14.946973Z","last_seen":"2026-08-13T18:19:57.928266Z","times_seen":21,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":15,"connect":11,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/rewards/ranks/silver.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.181Z","timestamp":1786645097181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/rewards/ranks/silver.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 556\r\ndate: Wed, 12 Aug 2026 16:20:55 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:55 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"0eea849108cc93c95fed94c6c1c05e33\"\r\nx-cpu-on-cache-miss: 193\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: 3c949765-4708-4d69-a8d5-08b315a90aea\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: wAomuhtjeynRRmHIZepdeCYz7VvxiiSPSdjJ5mujvnDMlVQMu1sm-Q==\r\nage: 93442\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":556,"size_decoded":1409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0eea849108cc93c95fed94c6c1c05e33","sha1":"afc9f8bf15f347863233403abc903ef876bc94ba","sha256":"e53c941eae806e1bcd546d7cab3ec58097376c51b56a416796f8ffca5b31605a","sha512":"113fdbe67527210d1b2c66b1ffa4502b4a096b655e6c091b984b7d853665380b1623d09c19d5f0731c3ab512b54bf053c36e1925232a2721d93cca8ada0304d2","ssdeep":"","tlshash":"79f026d8cbb438d0ca27dcf161d550a95f229211029557b446c04c6a70a79d6f357c02","first_seen":"2026-06-14T08:39:52.413135Z","last_seen":"2026-08-13T18:19:57.929224Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1d492d7572899697.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.200Z","timestamp":1786645097200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1d492d7572899697.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3fd3f\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEFsIAE%2FI0XgX1FNmLTITDTmEUZ44ywOOeZckO0Tv2cCJE6At4glW10dlYp942QlYUfWAoZTa6JFHebVBCPbW8z2XSVCes5Ip%2FlrsDNr5te1iymKBlNW4%2Bh19MnlJgBZJNWfUbw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b17a297131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 261439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261439,"size_decoded":262143,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"9338b17c74e814ec66916ad5da44d9c3","sha1":"d4b89dea4f27e4c7cd677745d0698be7a0daf2ed","sha256":"5dd65606ea02c21661263d2dd8213e8da0f5a712ac752838412061b472c66250","sha512":"3c42149eadb761817504852c15f076ff727457e6c0cfb0fa0ca808cfa081a79ce4b61806ee2f39f88c162509b2158ec1213e4be19f887288a5a14f5e31c360de","ssdeep":"6144:dIZniwzXh3FXXyMYnm6yr5hKrHwV2cKqjdonHA:dIZniwzXRFnyMYnmHrPK8VsqjdoHA","tlshash":"3d44239530a1f612099f4f8372ad2f468918fff2b257326c3e563009a6776a9467bdc0","first_seen":"2026-08-12T01:19:43.341658Z","last_seen":"2026-08-13T18:19:57.930144Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/34cb283193d9233b.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.201Z","timestamp":1786645097201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/34cb283193d9233b.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-94dc\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hx%2Bh8%2Ftj87cH%2BM4uGyNVynu3yc8xL24xfhBe6qBmmVbollC4w6fd%2FWweNKhGv6NHivGIBen%2BIDlecR0rMmFN61kUYWyYlRqWXkX3C%2BgdC4akPmMB1M8%2FeH4X3TZpmBoWBx1CANs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a2b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38108,"size_decoded":38818,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"150db76e54f8a6d9132b9c249a97afae","sha1":"75f2be44528cdef538d396b6c413a76691b496dd","sha256":"432346155e0bba0db96331f848c41cecde60cacda954c12f417f5047d62bb010","sha512":"e12e648360893e8da752f24035c73c43fd38df6a62367361d2b57e94a193dadeea8eb9247771d41f990312557a377e93af6d7d55fd7747a98f122b459bfcb93b","ssdeep":"768:VstjpGJh4GrYYIar3kOhFhIgzng5Ia0KbSQLFNvSsPSTGNnBT+mck:Vsra4G8YIaLByX00vjFsGNBymck","tlshash":"b203f1b507fb9600b2985a0467a2d2f1886be4725d1fb730dd324e70857eb5fd80a0e3","first_seen":"2026-08-12T01:19:43.258296Z","last_seen":"2026-08-13T18:19:57.931023Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/favicons/favicon.ico","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.587Z","timestamp":1786645097587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/favicons/favicon.ico HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a7969b1-332\"\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FC%2F7U7eWvQJ%2BoV5Dd%2FVUyavRXsfyLk18BNtFU6d4Bvdj3Hq8ZzK6UjLkwwyykouwoxg9Ml9kwyah9LAVue4ZgLgu5Rir3RapJubDJsFPSmgUkhI%2F7TDVIG0gjP4YbsyVwWBaS0k%3D\"}]}\r\nage: 829\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8b4da8e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":818,"size_decoded":1517,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"262020c80b5f29d1fef35882111414fd","sha1":"9c5ff6ffa7953f6d81095742c1105deac98344f7","sha256":"7232c155bda66361862ad5963dd4e7aeeb6a4c097c5e9398f1853f4c93a6ccd9","sha512":"0c2ba225bf19e1b1aed92184e575ea5a612e2a043893a5ca36f06330b9d6c17d327b104f2aa0dec4331b22ccddc6c9f694adfd909b4bdb4a03b9d166563a4a7e","ssdeep":"","tlshash":"f30181fbaa1c89e6833a013f08adce9070be5a18782401d30c27466d2ea8150cacb70a","first_seen":"2025-12-01T11:28:00.225728Z","last_seen":"2026-08-13T18:19:57.931924Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/057af6dbbcc87ba1.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.874Z","timestamp":1786645096874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/057af6dbbcc87ba1.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-306\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJmP%2BGW6aCOhFIOWo8aw7z3Ah0a1qqwVNkQXkgoV19HscHPN07jEyFQHbaR6ox5pZz3SuCkUfuTLOxrUXr9nWMS%2F98L15NBIy1a%2FjINKlJESsSwN2mcDBIjtfEYIRRCVaJl6qKo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af79fc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":1145,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5c34ddd7be08c7530a567d6b97eb32","sha1":"9fa4861cca959672891ed697b3af0bb55f6778ed","sha256":"54349a1ed20e7709384d0b4847e1b8d6d3c064e6bc28bb3b19e8ba833caba5cc","sha512":"392bb47f9acb8622e4fe0f64ff585e0e4e4e91e09e932cd586b8567f6bf7ac28e8e418e6772596cdb6a2a27a2ef1dc9e2a301df065efd2c004f5e9ef67aeadcf","ssdeep":"","tlshash":"bd0110fa32ec82d15b0e8710a876686ba90360f70a4c008c778c7ac96f4d8d26842e4c","first_seen":"2025-12-01T11:28:00.255154Z","last_seen":"2026-08-13T18:19:57.932789Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/fe0646c02d51acd0.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.595Z","timestamp":1786645097595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/fe0646c02d51acd0.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3f23d\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzmRK358vVPxqZ0rVXdw25so2tPJAl1C4HCt2EvaG03e%2F0pEIwdsq2%2FizNEH3o2wewe61smdD6OhTcSXwbDyaEmIAZisEdbk%2Fm3mRz%2B6IoTj8iGpygRDOLqj%2Bi5rpOJvGpkECOc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa737131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 258621\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258621,"size_decoded":259329,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"58032d6c6f67ec94ecf9e916dd5222a5","sha1":"3f7b6fae6ca87310ac61033079116ed26464682e","sha256":"ddb01468c55177c2c678bde0e17f320cd346596463ba6c611a18334e1dfd0180","sha512":"6b0c71f2ad5c7c867d0b83adb33b0bfef308f8f2f62ac7b67192e9e077d5175bfede5fb77d0a95a85a4d96d0ec11e73279478d2e6c58728f925d63ab9c6e242b","ssdeep":"6144:99D1HGhqCCt61hJIkp89BN069VWalqoJSg89VxZZm2:99D1Ft6PpU0EEawoJUnm2","tlshash":"074413e8a853e57be3a60fb1c920876d369ba8d35c17a216df06115c2c670d372ff610","first_seen":"2026-08-12T01:19:43.366157Z","last_seen":"2026-08-13T18:19:57.933609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.644Z","timestamp":1786645097644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-winner.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519068\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-13T21:46:43.785015Z","times_seen":549097,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:18:16.198Z","timestamp":1786645096198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63pzrhvtF39i%2B0BGgC8ChAW1GGBWRDyPPBueawipNPScybQuCLVO4f6auhNZEn3%2BRMidybZolPCsFF9KF6xKiJeezxeRlCW4xiV8%2Bg1N9a8UAttCsD4mw%2BWMRNPreopE76ZtI3I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8ab598d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663501,"size_decoded":72426,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64381)","md5":"0beb2f41971f2ed2ac4d040f18d74f07","sha1":"36a88b427118a28f956e9582541a37d1c2d588a7","sha256":"cddf0bc98088c88ab61fe40aebe532a8ca5c67f6ed72bb984c5ff89b4d1b13a3","sha512":"db25b0d34e3b714b43928636c36e2482668a72d1c36a300c1ea0c6085da36a7ef89f07292aa5a21482c7970194452b2944b0784f45480d51ef5e33733695df70","ssdeep":"12288:vVHbyhclvWngjFzlHsm8WbRkWyi61Pxe4bdpk8WbRkWyi61Pxe4bdtQ+:tbjs5","tlshash":"fd2567f622001a78083777c8a820f97dc31f626def6bca6d61b5ca11f1d5ae5450de78","first_seen":"2026-08-13T18:05:17.086539Z","last_seen":"2026-08-13T18:19:57.936308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":122,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b667c346a51e0317.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.781Z","timestamp":1786645096781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b667c346a51e0317.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1db0\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIzr%2FvwhMbg6fEBB%2BGCx8oMLv6XMVIG0JpFWHlOvm%2B%2FW%2F6xt2VIGHEevDo0UBxBZUnzEkzlyGEX3UznAhExoWRVqB68PS%2BLNiR36nW6jynkZEizuxcUtO4ZU7OQ0K%2FtO%2FpIUifY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aed9bf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7600,"size_decoded":3553,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5674a50b2905cff0dc613fe35a6bc69","sha1":"0d88ea66777afd5f176f0aadecb2d08114a863c0","sha256":"307968ce34abeeb4f6539b1052942bd572543fc9278b07bf96b5cc55dd5f69a0","sha512":"2741a909a32df4183d8aabb30417bf19bcf4b6c1948a133d3172234d7e818974a589d94dbe09136eb855b70b605e0568baf57c54466072663c0c3a1c887fc5b6","ssdeep":"96:0VOiLMQhurFfZMND/L6o7vWwuJqwunvo4gQIplm+JSUz6jYX8de5QbAEfSewhK2+:0V5MBZMw0WfunAHdlm+CAEaiV7","tlshash":"4af175d8333a83e8e416b3efbb4550947e1a95d4aad1c1b0c3b11d8dde4226c8c6dc93","first_seen":"2025-04-09T06:18:07.467517Z","last_seen":"2026-08-13T20:36:53.609104Z","times_seen":404,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2ec47996e75da60f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.848Z","timestamp":1786645096848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2ec47996e75da60f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-59ac\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVanfNGd5rsOg4tVZa%2BbZyLWI%2B6W%2Bb6KoH5GhyJGbSC69v8y9BeBCzXwvDJ0XZZLeqMQyAAzTiFghpyYlm%2BFMl6s5wb9%2Bt3jqQQpttVaC0NbPKIV929gXant%2F0PjCYUnpjoqXY4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af49eb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22956,"size_decoded":10390,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"104e6e03f2e50aef593e5e91413dcbc0","sha1":"992e9cb97500edc98917bbc585d20f2c75ecff4f","sha256":"444f295f47bada728a63b34c1fd84808da3e15366a61a3b32a1f964e341b0558","sha512":"64e5faf9d9c360526c60ed05b9c59e68d92c90949d2854c943d4ab90242043ffc9b5bc72aff2b6dc240a6164cbd5caa9d4e1dc987fea19ad2d8c542ce95882e4","ssdeep":"384:SbJ3lda1IcTFGUFifsZ0ZynzCjsNn9NxiCJD5BQzbvPsG7Zw74V4NqE18:SbVlda1psUFifGXks/XCPsG7OJ8","tlshash":"a6a293c623faa3f8e006f3fdc92665a6bf9724f473849a68c7a52d00e54315ddc498c6","first_seen":"2025-03-18T16:26:53.646766Z","last_seen":"2026-08-13T18:19:57.942249Z","times_seen":71,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/dc222041e68b194c.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.198Z","timestamp":1786645097198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/dc222041e68b194c.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-8524\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8sQqsdk2MivaUB0mE9bjLHZ9rpO8PlIOJ0sIdQ128KTfLSbqpXfD2UVNzl4xtuOPz0PXmrf9ME0Rhdpejraywo7S0VMCa%2FjaCMNSRFctRhca%2Fxr4P0FPmCReYvcGQ7Ae%2Bj6SHg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b17a277131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34084,"size_decoded":34786,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"74a6bd7048b876840499086fed0fe8c9","sha1":"d024fd89d8be1bdd9f6712b76d4227fcfa646b1c","sha256":"20783dbcc82345a34934bad0bb9ba22c078ba00a7339ff23de964f472e1d202b","sha512":"1405ab30603c3e4e3eaa8e6d089ac615821f397e9c39b930351372218d0de15a4f1e62acf7efb695a750b36a3d97e04196371519cbd6fcd63d28cbaf4617a019","ssdeep":"768:sTd0RA0IBj1+j7vLNti7qhem2jezrKZ5RGli2U/o8m971iOJrZPZSVcSqQ:sB0FIlY7Rt0DezrojFi971BCcS1","tlshash":"87e2f11afc57a7eafa2c8a3d206803fa58d34d8c6c49b96285a3973cd1487aa4478744","first_seen":"2026-08-12T01:19:43.357846Z","last_seen":"2026-08-13T18:19:57.944007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/8273bfa7a468a3c4.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.261Z","timestamp":1786645097261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/8273bfa7a468a3c4.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-1194b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plAaWCz8A1CbflavOUk3DOYefSF14VfEZUEU32EBXZChk6biSlmCkIPOB5GKUYZAZW2P7ZDQXwdklKJB0YIl3bLRhQ9gOmnIOU%2FkkTJW1kcwhLR4NlW8coLAZGBDcKePz9bHnZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1da4c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 72011\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72011,"size_decoded":72710,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"f7cf37135470dfc1cc333d360a158161","sha1":"aff282423e95f5b59a84f754759a4dfe6bab659d","sha256":"202323b98b2f4bd068a97a1217655ab540c7746939255bc3fa14bc17438a5297","sha512":"37d662adf1441ffe2d4925000cf7d0e8bb2bf936ce78bac69dbd05ee774d1a7cfc98c0dc787207ca64e0cb3e50be8637132b5f5e0b20938948a1557f49c426a0","ssdeep":"1536:h+Ib8FKt8rU7VtEn4tbKXZ1HVf2rb2q/E7cY79BiAy56vVbyq/:IFKOYg58rb2qSWAy5w+O","tlshash":"e263027bdecab6c58a53e7afc9673f26e6367146131fc3502a64c5a7189f33540102b2","first_seen":"2026-08-12T01:19:43.337327Z","last_seen":"2026-08-13T18:19:57.945809Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/5cb660cf6eb9773a.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.588Z","timestamp":1786645097588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/5cb660cf6eb9773a.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-22c46\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxlvNi8rG%2FaZt342pjZv2iD3z2WLHxswWiaEG5T9HXhafKYIRUsc%2BVvzNtCVWt4OHk2EtfiSbXNnqG1GtomwsetO07lKVI7HflW5FitcCWOMRI3wIw53SKzvUBF1Oqx4yImaYEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3ea6d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142406,"size_decoded":143110,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fb04d4585bd89cd30b06d90be0476736","sha1":"9591cb68839a330346ba2d227dcccd55ee282c09","sha256":"b4b5ffd1aecc02572651a8bc6caa29cf67674749432d6c08ab76ff619c446963","sha512":"2f43ed912ebe3bdf7a68c907fb0a514b0d2920b7530ef655d0dd2d7c414782740bd9353321edc574abab3c47d282bd2ab94ec7d5150479ad791f062f80d5bdf0","ssdeep":"3072:bPDN//D2E8BjVFjYva2KzUMue43cILNcUCVrjd16Ag3lUe9j1G0ln:7d/DgICIMB/I2/VrB5u9S0ln","tlshash":"b1d31276d0d2afd81d9e0919bb160352b73f6d0b984499eaf7090c0369d5f39936f44c","first_seen":"2026-08-12T01:19:43.360087Z","last_seen":"2026-08-13T18:19:57.947627Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/8266f15082a310c7.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.602Z","timestamp":1786645097602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/8266f15082a310c7.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-36032\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6jyC13M7CRwiyxgOzRVsfc4ucSg96r8IsjKzHLkET4N%2FyPnSTDKNLzbi79ZNn4%2F3q5lLS2qghRH%2FynBVHsIdjUVgqSdgnkUQYZ%2Bv9aMrea9a0hjOoITcKwXXESJoCgE5gOBvbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b40a7b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 221234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221234,"size_decoded":221940,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"1513f2d861830b22e0dd5a73d9598cf8","sha1":"37fdb8b16330a26e9e39286f511b075a764ffeab","sha256":"ce9e28d81915ff55e8ff4d6617b28549b13d25493e71bb9806ed8ca51efa751b","sha512":"74db8a0d6e240745430f7e9e389d97fc616430bc27cdffb21df409e0cbde499f6ad974c5398f2a1e3d498c67cf85c41ba6e4ebaca43926232482d4cc54c075b3","ssdeep":"6144:EF7ZPZUUkSK8iLFpnBtekn08tzJanGOop0hop6AnJ1:EF7hhkSK8YFfskn0mzJa9op1p6iJ1","tlshash":"ae2422cac8c61c2219f31706bc51f7d6a304d52d83b986277a099edaf9809cadcdef11","first_seen":"2026-08-12T01:19:43.385998Z","last_seen":"2026-08-13T18:19:57.9506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6a5b799867830397.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.782Z","timestamp":1786645096782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6a5b799867830397.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1bf8\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrPjDq559aWgx5%2B%2BBjGkkMIeRte%2Fz6y1CRI096lpmk9LjEDAeGlsvBhQ6hiIuqWSk5V8Vw%2F350GBSJ6rkN61ZslR%2BEb7zBpPsFu0oD7KR007AL7LNWanOYJmYP%2FqnmQ2RvKDc8g%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aed9c07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7160,"size_decoded":3447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc344a155fef4a6b62af76f4958ff3c2","sha1":"468d6bc13c6602bc1f9091dfadc4e0d819b4ad11","sha256":"7e6ed94ae0eae5c8128cb8e566c61a54ea2bc8a72f302b4c82aa30a4db5215f9","sha512":"44a5561d56a5a09808693175b1935a3c20f822deae9cc6a6cf585ca057808d9d3158b50d4043a15d5de2096f7b64c510cd6150b0e7805317dfa7fe7c09c85ba1","ssdeep":"96:EvDDOv0PXHsiFNYt41W8vSJmZSumXAa5hHPHXI0a/byuhTlUE2Eub+BtkQZR6AeR:E3HT/Yq1bSJKSSOHP1za2Vb+Tf46QUyj","tlshash":"cee187c4367c86f4b905b76e428b50392e77a4f6efb6ed71c7422d0a744a42c0c5acd2","first_seen":"2025-04-30T09:04:53.185798Z","last_seen":"2026-08-13T18:19:57.951742Z","times_seen":138,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/36da84bbd48f1b6b.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.809Z","timestamp":1786645096809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/36da84bbd48f1b6b.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2b3e\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFhWRZzwi1fVR2aaJ%2FNfsQMmVlJkDO%2BFOlbdsDIkWuTi1fJYVCxa5PZ2pIsq0Qxsi%2FMit%2Fn4IWhBwmHW5o1ojWgoH4O3RK%2BQqrjhXAkFYY6q6HSNsxbOPJYN5AMsAkBQ1l1KTTg%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af09d67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11070,"size_decoded":2303,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74d4301e41d46c39f6486a006e0b6db5","sha1":"2c8c3fc34521fb7d91e6b28984b195d9135c32ec","sha256":"77b5d6f77ef888e31ef6dc92e8b5bf58fcc8a4bf868b04d9b20807b079761f5c","sha512":"72915c67495a439955883dc8f099a3879a6afcf5ff67574f15d1c5dd59cfe1a82b294ffe0b74c4bf9ffa16f6b1c2dbc59107275c67622396c27f1f292c7e32e0","ssdeep":"192:CZCzxc9+BSsEQZZCzxc9+BSsEQZZCzxc9+BSsEQL:0CF9bbCF9bbCF9bL","tlshash":"e932a6c06b2482b8f109a7fcda1a64e83a4318d5ed58d8f8c6a13d15fe6513e8d58fd3","first_seen":"2025-01-29T03:17:51.170423Z","last_seen":"2026-08-13T20:36:53.499677Z","times_seen":198,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b9c181383c9fb798.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.854Z","timestamp":1786645096854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b9c181383c9fb798.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-5529\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4On0y%2BQSNf7Isn1QhWVkAy6qT6MWf7kneKKlA5Poa%2BouR84C%2BNsLz9UZgeieMshEbLU8iJlCHQmhhtpxB58fTPLbJwrdNn6HfL1JYy%2FDu58owVJ9sC3c%2BpHXpvXrg1Ipnk4fp4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59ef7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21801,"size_decoded":9366,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b785195d527732a800718d7f0d0e787c","sha1":"62f0c37f6e7de4edde1042d3836d5fd22bf4e163","sha256":"46081a9d787136cf0f644c6b1930bd5abb987ce75e32135fe4a4aba98973c7cb","sha512":"122b2f97942fac7fbae36df7378ef1fb5aa5d7acdfea1da9bf3e6ef60759e1ed354e573582e327812f3ea1b9292eeda99da94e42fa4451c217c02828ca561619","ssdeep":"384:QD6w6i804oFxL3rCC+SWHm8N/DRxMrYUa1wT6ZAnCiSlO7peodl+nieS2R:s6pDoFxL3rCC+SWHm8N1C8fW6hiHNeok","tlshash":"d4a2a4c87ba993e4e805f3f2ee1610e5bbaa58e6abc48970c3552d55e81707dc8c6cc1","first_seen":"2026-06-05T12:57:30.23379Z","last_seen":"2026-08-13T18:19:57.95526Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/d935be148224d312.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.855Z","timestamp":1786645096855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/d935be148224d312.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1e41\"\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BhjpqMNyJsIHJSpXp9%2FE0O35L9fK1ip0xIc7u3T7v132uXMAVY81MFcR%2FFCqd4dNbawsZkym5U%2FxARWyYHQh4yOGIsdPjpBm0YMbM4dAaTkJJZP3cr%2BKQ0bdviizDJMaQlgSuI%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59f07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7745,"size_decoded":4092,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dacc3645083c2954705fb9ee0b013fd4","sha1":"82d71c1b7394c721e4d7998c9426fb21b10b3b45","sha256":"e98b186b8f650ecb2fb23d230097dc2b1313bbfec6896917bb85c62b772c72e0","sha512":"671a431386dac983751056a6c246f29c77bfa30bf6c46335faa3813569aa3a07812de78bd7fb4c77ae83ded240b982b355298337a36c220c3389d842b89e89d6","ssdeep":"192:tGUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tcXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"fbf1a5ce3bb09ef48d75c7d2ff532058791bc07b59848e20e1599b0d2a9081cdea5d8a","first_seen":"2026-07-14T06:13:23.537378Z","last_seen":"2026-08-13T18:19:57.956704Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6916543b04b0dcb5.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.816Z","timestamp":1786645096816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6916543b04b0dcb5.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-40e9\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71WsIKjpBG4NhsFkYF1vOmPiKelk5u4UkfJ%2BFKMT6ggyWf0VEalvpVzWZDlg8myfX%2BaSKQ006TkOCPvS0UVSwqmiQcQv532Xjl%2FkN6gywySSyYCcyEcF64lJClMabDt8ViI8vwA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19db7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16617,"size_decoded":7926,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8407a9908502df57300664f6b7a8ab93","sha1":"36f073a1d2e04c8f2263aa5a5d65f06ea4021c7d","sha256":"5621cb3237afb87149ade84ae7316071778061a94481101553c0f6381cfd632a","sha512":"2ab60a141b2052e285f615c9b2af31e6e3ac258e62329990b482d839b76204ae08d05601a8d5560f5761d031ecf6017e44a349eb6db168920d5889e89e1da9ae","ssdeep":"384:80m1TVXZKeAjQrAfFK0Z3DPwdr/P/qvxB7jKeaTO9Xi8qAvG897:8XtVXElQrA4086vxxjPv0k","tlshash":"4172f9dc2ba893f4f406f3fd9d2b54647d0a24fb6b80d979c3a46e49a44706e4d44ce2","first_seen":"2026-06-07T03:39:13.721988Z","last_seen":"2026-08-13T18:19:57.959674Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/589ba3eb48f84300.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.867Z","timestamp":1786645096867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/589ba3eb48f84300.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-373d\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcxI%2B1MSAaPKMz7A1ynyytXc0YjMAqyYuufuJiljITxqASAU2KvKz5XMuL02Z5QHPz2VEkSvrKHh8EOzSBiUFxHM3QEGnbdb20YbNSxx9B2%2FyucVRB1neN7hU9XNq05qnWPk5vY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69f77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14141,"size_decoded":6416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"971d8e22dc413e721873192ca7b84886","sha1":"21bef30a852e983e6733b738065b609a56ab3b41","sha256":"6d6b4307153e12e565f57e326b2815d59443f04551d1a23f5f6799aad75f1caf","sha512":"b036be51dcaaef6a4055bf42558eb5615b4947846e890b30031a20dda9734159d73b0437d3dde8bba008efa4fbb944e33a6bd69e3793f4af3c82b8c03b157f61","ssdeep":"192:8Cbea1nuuexSVOg3ALXb2KyIVahOMt5QDwG40DKsh00XtPCxZ:Sa1uJSVO40Lljaht5QDwZ0Dr0Ga","tlshash":"6c52d7eda3b496e4e485e3f4db2e42e4322335fa3a60cd9d83a52c95a55243d9c48cc3","first_seen":"2026-06-07T03:39:13.598311Z","last_seen":"2026-08-13T18:19:57.961298Z","times_seen":14,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/75f6503f002750d2.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.251Z","timestamp":1786645097251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/75f6503f002750d2.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-4039b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DzViykL6FBFl35j3yZThz%2BESP93jkrZFIzDvo19kJ99w3ZJNNhQ24v7yE%2BzjNPkjdwBX9Kg5cQgCkpwQe%2FIQqPvcAtIxIypDFblHtqouLHH4vDNxKl8Hj4oXpveZLR5RdJMkMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ca467131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 263067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263067,"size_decoded":263771,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"5d5c990b1bda470197716302f013bbc4","sha1":"22d45e019fee715399560096b07697f81d03516e","sha256":"0ec8ea2464b82fa41d1247a1eef54afa19acdddf0e1e79742c707b3c9a4cb8f0","sha512":"1b5a1d4fededcd77597642a16bc776623a155abfc91c6b242c986d3e8e707197906f7aca993f5e25c2da2ae035b2be030697b944cbb6cec35eec4c23385f3fa8","ssdeep":"6144:TsZvjHAWnRaYJXLK1eYx64C9jL8v6whlGtF:abnMQ7KrQjGl0F","tlshash":"4e44226b06e65ee52c51560b0b855855bcfcd90833307a29b24eb9ce31d7f218eb3a0f","first_seen":"2026-08-12T01:19:43.320022Z","last_seen":"2026-08-13T18:19:57.962687Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1aa6ffa4a1723ccb.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.795Z","timestamp":1786645096795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1aa6ffa4a1723ccb.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-fa7\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8Lf%2FoT172zTjIJXPKJsSqtddNAQdzxefevpa2PTsRoMFAchJz0%2FXNOnIbO8AZo7r80ZSA1Xs8Mc939RDX4yDrQGgd31bz2PN89W85U9MAiZnMx8FQa0MFfQjEufzAT2FVfA9SM%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9ca7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4007,"size_decoded":2384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"381d1eeb721c703b18e45c0ae46a6a48","sha1":"d8370e1e0aec5bf722a7e48154f87b85d3f3a7a0","sha256":"98aacf8aec3e4d5407992758cb6ab696de92e1b14c97c6c7cd035897dfa37ad9","sha512":"9716ac738718b54e05f3b616a8a67b043c5585c142bf72acc293f6b0ca7219d44ff3db4c4d80b1d7bca176d7c31e6ff2b57c50a51f5d4711587630761e735f2c","ssdeep":"","tlshash":"1781b38933e8d378b525b7fd536a60367c0768ca7510c124cbba2c44798151d6d9ece7","first_seen":"2025-05-14T00:07:15.972016Z","last_seen":"2026-08-13T18:19:57.963908Z","times_seen":89,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1f95980827816b8f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.811Z","timestamp":1786645096811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1f95980827816b8f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-152f\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9jLBKd51NQzZobOLwJHHXU%2FBqpTjR0ROlu0aHwUR6hfodReF7SfcDea725M%2Bym6GuFRQAh6JZ8B10ss6aNRyXRifOZ8%2FhkDG9HhaCm5CvQdsB7E0XXmWSD1sxDURs7iFlx%2BMtY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19d87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5423,"size_decoded":2951,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08be0b49e718237abb67314895e82e5d","sha1":"f9d0dac346618e8724796475d97a6cc2ccc5a447","sha256":"268cfdc44caaaa102cf4a5e51b01427c5c0ef9c0457187d5cb75ab315e249cd5","sha512":"3cfdc0e6e17bf92fcd8cbc0fe498495f421591f11e5f3b6d62e0101e1268969d1dc461c79ed953a2279579941005cd09559193fb9382f04d429771df546b6466","ssdeep":"96:brJrWwJbJKyow//kRo3XSI6mjbAC9oi8qS24w3SOy4U:btrBcytBSIlqqS1KSOy","tlshash":"4db185d8776c83f8f000b3ba9a094474ae5670d9be959039cb542c8a7ec64af4dd8cc7","first_seen":"2025-04-09T06:18:07.637807Z","last_seen":"2026-08-13T20:36:53.526378Z","times_seen":414,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/26e05cbc070418f5.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.813Z","timestamp":1786645096813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/26e05cbc070418f5.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-272e\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Znj3GDLmW%2F6QaIfXy00%2BEWl9SFSxuEwBhlribdz5fOHSE6D1GFWis9w9Yueu%2BzQ0lt6BtSzvA0zPmYeiNuzGR%2BooD5ApMm%2FqwPt2AmCVpM4lt0jzT3HzjhK6fUOLAemcm%2BkwzJw%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19d97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030,"size_decoded":5073,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64d4ed169e2b77aa0e567e4fd9804302","sha1":"3e0298f436d3ab8f6e4eba09db8fa8b33707702e","sha256":"7904053ec4a239de6a7778a44d882ff82846f5ad42b5cd82a90ddc7cefb6b9f5","sha512":"afe883b038697c43de23a2b6fa5da1001b62b8334080825d69e667ebc49c7a77ab22b5943a996378b9c0c08c2769e98ea493c060ad5537ab0f7a0df48b21ab43","ssdeep":"192:/hPMUU26Tm0jhFPA/bPgvzNRJtyLM23e1ju2VJyrO0W4wr+ToqoVV:/hkO6Q/bINRJILpt2VJyajKMV","tlshash":"ab22d6d83338c2ecfa45f1fa531260646a6668e9bbd5c664c3f19e08bc814684da5df3","first_seen":"2026-06-07T03:39:13.770395Z","last_seen":"2026-08-13T18:19:57.966345Z","times_seen":14,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6a998313fbb80070.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.870Z","timestamp":1786645096870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6a998313fbb80070.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1484\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBy0XuPtVk%2Bm14xeYyxIHmnG6TRQcDGdx06l%2FZgdq3nThFihGM6C7H19TGduncvvVzr7BtbVXfs3ESGLAdwGvhKRx%2BRK2ulDjvysLHu8QqeKCcttfxB6eUPIVrEBLRQckLA2sr4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69f97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5252,"size_decoded":2855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"360615775ab1c84a74fdb8d90fa7c66a","sha1":"c48389b3fd19f7eb2574a9d59fcbb5278e5ccb4f","sha256":"611ebcc0f227545dba2f7f89f839ce9cb3378bf48c06c8e12d8b2d764b0786ea","sha512":"58898cdc03aaa41a9424390b0d4ca53af363844082a8a822688c550a3600bde9aef133ca16c1ca81b8d0e5f13c942ebfda591e052ad5f163a6e5c75423f4083e","ssdeep":"96:UqxuVi4lGpfkBbbMkBdYVWWHgR+wzyFLMr4HRBHN/+rLqnj8OTLWQu5gA:Jx9ybIFSyFLLRB5+rmj8ovA","tlshash":"acb1a4dc6358e0b5a9406359ff3a70ba882b78f45b9891808bd56f1f340997e0c7f9c9","first_seen":"2026-02-19T15:08:33.822534Z","last_seen":"2026-08-13T18:19:57.967271Z","times_seen":33,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b415752b376a5ea2.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.213Z","timestamp":1786645097213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b415752b376a5ea2.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-8572\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3eAst3H3a3hMiaKWp3Uuo06DvuZLMtq4M00hKmHm33JWM%2Fi7eEOcM3TpTWtQDMOCNaF77B%2FzVbHOlXDefkAdAQGyGDIEZcjqtHU%2F%2F%2F2NftYKKGmQ7EZdgEh%2FWq2CR3r%2Fo7b5VU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b19a327131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34162,"size_decoded":34872,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"673be18ac4f5892c5db193ab81bc0623","sha1":"8c832a324fd8f68a492c36fda25edb22c1652d75","sha256":"72fa6d20a25fd1f347bf52f21d0e62513f2c007b31d6c7af8c83c7c7b35acdc3","sha512":"fe3bf6b0ba0cf902bc19774b39243ef94ab1ace1135e422d0d3c6ccd584fce27dc3212c5a0ac3cce234cc2f1e14e3872ebd28f71fc32f07178e8074d66d86888","ssdeep":"768:Bfze8BCf/1VzNf9bGOqgl8eB9/qWqNuXbpESenaFfjA49KR:VzeFf/1H9COqgl8eBltXdfFfjs","tlshash":"f5e2f18653361311d469db218e34342d17ad18a5c9df753a7f8eb1a040f8b35f9ab2e4","first_seen":"2026-08-12T01:19:43.346347Z","last_seen":"2026-08-13T18:19:57.968212Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/3348717d5ab7fb7f.webp","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.256Z","timestamp":1786645097256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/3348717d5ab7fb7f.webp HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-37f2\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4fotg355axk1JiBzRRZ8T5SqCeUN22aZ8srn0ox4VJEIBiOzpiucLVqYm9PODy4lWpAIWUWhT0HPG7u978nW0FMjkl6yNxC6w8PvIKRCXPkeClYTEb%2FrR%2F0A%2BttkoRJvwSyPQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1da487131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14322,"size_decoded":15025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95c41b110dee838a46c34aae87d589b6","sha1":"228c36f743a8274fcf4ede70aa5e81710f98e495","sha256":"96e19c2a2d82041dbc5fd141b305d864d284e09a79df733db7464a3d6f88a205","sha512":"801925c0a2f2e4feac3d6eed7a8a789808ec9f452bf8361793c45110b39a50afb6348414166d09a1416b3b0c5fb7038bf478c335a26fd3c1b150dc2acc01272d","ssdeep":"384:egFxPlTikxdSC2mCSCgUhZ7/6sqOg8EeIkQJDN:eWdTikxFwSCgUD7/6s7hkDN","tlshash":"ba52d07caba4227d8808e85467d113e9cffff5d8cf134767247a52728c36886052d6b6","first_seen":"2026-08-12T01:19:43.287298Z","last_seen":"2026-08-13T18:19:57.969218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/74723e5f6fedcf71.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.597Z","timestamp":1786645097597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/74723e5f6fedcf71.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-26682\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tV12%2FRz3fvjCq1ZSJ9EwzcOFSWOsTCEPfh0LKmEh5TW2EcgZKnn0N2j3%2BH2QztVuCcaFpLKgRgJZxzfBicziFNGHHoWoSGVeCc%2FQE6CA6v1fNmeP2ObNRDUy86r9ma2g39CtThc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa757131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157314,"size_decoded":158018,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"3a213ec32f508b9d97ad67e14143e761","sha1":"fb6965de9286402a3d9ee7b9f24dbc20c9a0a2a6","sha256":"3f440ea600d1244a4bcd9a4ffdbc4ebcfeb322295a0705e0be987bd8dd453d74","sha512":"b9cd9d8235f207ff258f0f29b5da93ed6ba2325efa650ec9a45bf1391f4146010c766cdfbed8eef83d377913ec4e2e95e778590a0a77fb0ea2c57a088477f7b9","ssdeep":"1536:smeFLSR6ioiZHDsHvnCY3ROAPYcSFu2z8Ntt8wSCyhxpCLqv/ghHwh1DOoyjiH7h:92LScgj+C4OQSFlzOr8wzWx5vYxgyWbh","tlshash":"0ef312addfc2f0b9a1d87e530b4426fe1c9b8ddc2328c98c151a40c2706657a6977f61","first_seen":"2026-08-12T01:19:43.300947Z","last_seen":"2026-08-13T18:19:57.970197Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/0c79b2888a2d06b5.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.797Z","timestamp":1786645096797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/0c79b2888a2d06b5.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-28ca\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqqS8TE14kYvzdwzkL%2FgjlTGkEKDs8EjJfZQm%2FMPr0tpJ5fByuO3KYe8Afj7O3zSVYFdkjpLT2N26SucHCdpOYMf9yjhoe%2Fnb5hGQSCopcO03MVhFRssltMgD1kaGMFpEi2bbLI%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9cb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10442,"size_decoded":4892,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99dcb301ffdc7581ed9986db8b444f39","sha1":"7a6aa9b609c6a545571a058988d24462af4f80a2","sha256":"248e6c029c8a00016451a2ea65b7e7c76dd155c1d1be42553c0fc49f957d73ef","sha512":"a0e5eecb467061204b5d55e505435109fdfd4e990e87e8a12ed0a2ec167a3266bdc250c5c60a5ef38ecc00e9671fabdbc43b46265937c1a3be0f6f4dc71bce55","ssdeep":"192:XrbzSW5+IeS0BL2RqYtong8xSqh4Jx/kCpN9lPxn:X3P+IeS0BwtoZxSi47v5n","tlshash":"0122a5ed6fa54af0e481e3f9922200a5391b18fe2e92d775c3ae2e15f51284ddc45cc3","first_seen":"2025-03-06T03:57:53.453679Z","last_seen":"2026-08-13T18:19:57.971106Z","times_seen":239,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f7f1602a59e6ecb8.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.819Z","timestamp":1786645096819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f7f1602a59e6ecb8.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2082\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA2ruijiMr58CIx1hrPen9gfCDetB%2BvcbldUu9%2BjbbDx4JaQVy5YE0FK9tv1BLvixy0kkfyL5ToOLgZxsZE4TfyO5010nCQbLNbcViqeia4w6lxK3Q%2Bx7ZDpVM%2BP%2BuCL1zsa%2BEA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19dd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8322,"size_decoded":4039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"470cd435be29bd0a9dbce3a9e5075335","sha1":"801a181a23cd28ca588a1dd1b9babd2ab8c7bab1","sha256":"8f473e1d71ad959023272b98ce42aa18bfb4c08ffa202d49c05f1d0315a273a0","sha512":"db116c82662cbcdb971198f819db7dd5882e2652ef42f0d37369900e314effc75bdbb08a0c578f7bc8d462e7f3a2a9556e8be1268c57f3866d0f16504b1157bb","ssdeep":"96:GiEur/QuhJ5bR9dJZJcX9lczBJir/W9mGCURyG+jrjWUPvey+BVwHWkpcza2EJZN:HPbRTJYtek7GfJRyrj7+BwHWkpcz3W","tlshash":"db0254e93b1583f9ed04b3f9ab2711e0775278f7eac595b0c2806c693c9647acc868d1","first_seen":"2026-06-14T08:39:52.31783Z","last_seen":"2026-08-13T18:19:57.972048Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/bd953e94d1104f68.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.830Z","timestamp":1786645096830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/bd953e94d1104f68.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-5671\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Klxb0YoA0pbwOxmkWaPEYHMi6QG3jOymoISonVsQVG4t9oXykq1nfkkHooXKbPzXjpoMbbwV22uSL5RiawhTMd4ESaG04q0Px%2BzAh21LMUBE4LkM3bqs%2FHXyWTSzmscYg2AR%2FgY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22129,"size_decoded":9338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d15fe27fc9fdff7ac819688170bf466","sha1":"a61bca2b836431d773dfd753a51568dc787b366d","sha256":"6cd5b7aad602ec82f68892fdc511f6ef1938604a4b4458b7063d33dd65a97a96","sha512":"84464aa4d8dafedda29746945168908b3c33c28d51d01c1905563663150552557db6f8f0de5ca8961418664d472930b1802bbea67ba79dc7c966a10acc12a295","ssdeep":"384:4m3yMG6NF3NF+D6MMojPOAPV3oVwPsPe7ix1MEILRyUTciogm66e1z+QnyLQVzyA:vCMaHjdV3+bgcpyzlv2q","tlshash":"1da275d03765d3f8f506f3f9ca2aa5e5bd6728e8ba8180b4c3612c059d5217e8d98cd3","first_seen":"2026-07-14T06:13:23.673457Z","last_seen":"2026-08-13T18:19:57.972962Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/sprite.c45fce1f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.066Z","timestamp":1786645097066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /sprite.c45fce1f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WR%2BDhqO3D9pcHGpU79L1wptRaqb1G0O8TtUQWhjB7HADE7uSPW87ayFi3K2NF2IuRA5mYUwtK1ck76vKDNfMdZVV8USbou0%2BgSkT7oax8wpuj4UaVRnjfxa%2FBIXnHzvjGgBuNo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b0aa107131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1cadaf5d2d4a3600.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.237Z","timestamp":1786645097237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1cadaf5d2d4a3600.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-30244\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXI8yB%2FF8tFiEx7RhRPd%2FXgCg9H5UTfSX00OZf9RjiELHUexXD0SQGYiqVGh8cQCuS9YYXU5Qo7%2BbA5vmcwN17166N5nvkGfBdoauImLKBHOhh1Yz4kfCZscYwD7NJywYb4i%2Bq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ba3e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 197188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197188,"size_decoded":197894,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"6e4b2c9c81fc4044a3f00a068fe18478","sha1":"a38a6d9018b8c3bb4b1d54905f2814e482ea449f","sha256":"afb4e8f52cb2942649e44f14e71ce613381e749eefb64bd3ed67ab89a83353b8","sha512":"7b28521c175d22a67d8ecf0198fb66303472bd664045f3dae5f25423b729c1bef7b83b255ba36133c520028874ef75893b3721ba9ef5bcf18fdf3458a99c71b3","ssdeep":"3072:Boeuwzw7shyQMCMFP6UdjZ+XFNjwJssHlICRwbzYRdjOyodS7m6s6MEhf4BZXF52:BookC5M1Z4FNEJnlji3YRdQdS7n77QBU","tlshash":"5114238435cada60ef44712bee29aa44f6075d08dbbe0fc839439b4cdb4a2471b7d953","first_seen":"2026-08-12T01:19:43.343759Z","last_seen":"2026-08-13T18:19:57.974767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/5176dd7d75ba9905.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.307Z","timestamp":1786645097307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/5176dd7d75ba9905.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-11f11\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqiCoKhJ7HbqaxDXP8K2rJH48TYJJhdDlSuc7jKfHIslfIKXq2hwBQyGR%2BICOwLyKfYWmlD%2BimE0gHjMvn0cnndRfQLySjhBXQkHQIY2r1LdciOvBPKJLJRFTgeRHxCra47MYSQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b22a567131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73489,"size_decoded":74190,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"cf8286d73b3f5dcb660c269e925aa544","sha1":"d11a234033fe96dc2dca8035c5de09b33767e5d5","sha256":"cf7bb8e382280a2f124f1e5d95ba31f0a16351bb33c19e70b978ef7c47fbf30a","sha512":"4b55bb40b6f47bb0950c5985c376ba56d3af2520c16fb35e163e21fcf250672eb9a8df88b7f24ced563b57bad60f911c77f69c9dbb9ee762ef43b427accbf9ff","ssdeep":"1536:iWr69j39ahwGFcqqLQwPQS01En/+F9jhc/O2XHW:iWm9j3A6GWqqLQNPZDdc3W","tlshash":"8e730272ef2c54c3c6f92749daf98735d527b5fe60845c04bacc46ddb4e58480cd8aa4","first_seen":"2026-08-12T01:19:43.315274Z","last_seen":"2026-08-13T18:19:57.975626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/favicons/apple-touch-icon.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.586Z","timestamp":1786645097586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-56e\"\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6zBVnTrDRydysoYFO9WCSKmqjkNH%2B%2BeSdo0%2BsYaAKMNOJk2Nr8B5%2BTPcpIA1fch0NzHZ4jRskVc2L1aOfIj%2BlKPnRupxw005U4uTulVbEVb38uyIhG3i5YADoyx4teHWaIK%2Fh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b4da8d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":2099,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c13a2535314ec3ac378f651cf03f9093","sha1":"70c7140cbb645483ee6cdb914e931c3937fb6c89","sha256":"d371bbf854b42df726e2724623c62246bed6a5cc276ec902e949d784c5f3c9aa","sha512":"063a96236359102d71625e365b1429c0d2d80b9cf54003f5c31a5412fc1112a42f26552195437def5562bb267ddc916c2bc2df6fdcb9d62c7872cb1f55847c43","ssdeep":"","tlshash":"be21b6da6d4110990209511f28a58bfc25a2a24c3dc254c36d2a4f7ea0665b2872faaa","first_seen":"2026-07-22T10:36:41.073252Z","last_seen":"2026-08-13T18:19:57.976568Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/271ea73fd6ce339b.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.591Z","timestamp":1786645097591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/271ea73fd6ce339b.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-9738\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVXnqYLJYfdSlo%2FeCuh4lYmKg%2ByHh10NUHccI8oWsE71qLGA2qlYKBERolV3S5e58JDPJ0%2FVkh6fmfEBinyzaLgVnw8DEPdQWhGKXCfEdu%2BYS0x9HtbUhcuNGs9dl0zR4hl68FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3ea707131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38712,"size_decoded":39416,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"09836c79bd4a06bd4df05594d5e0a5cf","sha1":"964d51f44e005ef0f953b64dd107fb925f50a742","sha256":"5665dffd5704de03b7fece3a87343cb4d74ad5b4087d273933ae510b17bcb423","sha512":"bc4c3fd4b55ac8ec597ff86506d531bec6f9fe1f64ecdd780e91f4f7cf6cbf4dbe4162dce6ad8eafffe21b3b7342ee535d41dcab08869afcc117e88fb2bfa989","ssdeep":"768:uw0/dX+KRXqaoLRNXyqqrrsV0w9KxaJeIwz+V+LZFyTNW1:VYdXLqaoNIqqMVcGeIw5ZFt1","tlshash":"010302ba3def0add97e5aaf6618f682dd5014cf925887002e184b63a0647def1740c5f","first_seen":"2026-08-12T01:19:43.299943Z","last_seen":"2026-08-13T18:19:57.97746Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f7103cc8c4577aa6.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.798Z","timestamp":1786645096798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f7103cc8c4577aa6.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2bc8\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FkKVWJhqm8w9ib2ieUbGGghWRlPze6ekJgLR0CDkWHzpe9TByYFaxOzTkBPJrzt0RoHgqVoyO6oAceh1rV72xiwj8y8x%2FDvUYoRCd7ATufiuruKwp71qiwqe3RUHUKHympZpmo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9cc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11208,"size_decoded":5505,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5ac8405906ce55d04ff2efa2f7be4ad","sha1":"c843d370fe2d8ccf297bc39bff618c162ef73577","sha256":"8c377dbb1734ed46082f63154fa603b284e955f2689f3e2a01e5c296316c1e88","sha512":"0042d0265d28941834feb230e83c02ca8bd5bb97e67b05804fad3d343758a31d6c6c3c53c5b0a90e096694566fca1bda66bd3ef1a1808f1e5608f2a008d7b0ec","ssdeep":"192:JHrabnU8mflTzB8VpNbUPPz6W9EwEyOFfguBnTfQTr3pMqb4N4JjtRdSaHv92KId:JHrsBmfrypNbUO6EvFf/m5MEO4JddvOd","tlshash":"1d32c6cd37b59bedf445f0fea61260583c0a9ce63ac5c82cc3aa0d89a1418548e54efb","first_seen":"2025-03-03T15:40:23.183514Z","last_seen":"2026-08-13T18:19:57.978643Z","times_seen":145,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/app.js","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.877Z","timestamp":1786645096877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a7969b1-2753\"\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNUI%2F0fOeEbaIjsPWJoViGaoIfOqOkcmDeuxwWfCeewFv1%2FEZ%2B7lAeGYpf0dWMyQaKdrvxrG8PwKeUjzxu68G%2B4Z5zGJgALfrqwCmwMAyGgSUKEIbG2CmOpF5hkpUGTUtZ7X3Wg%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af79fe7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10067,"size_decoded":3797,"mime_type":"application/javascript","magic":"ASCII text","md5":"8243e92697221bba16018a3df3ac4012","sha1":"5bc7d20b1ad11e0774b886436a4882185915edf2","sha256":"a98456d53a6d6f1b9d8dbd172214adfeb677ee7ba3670fe6f9f0c21588b48a98","sha512":"8072100110c6a76d15c96dcf77dc5fc2b066c4a0376e9be8cf7bc663f4f95c9c89b43550cf9421cac47a513033635ff490142a03088597ee2a55d22805120906","ssdeep":"192:ubNef5MPChNEMa7irqJEc7ma+/NscnZf3uMVHvJooZOTWHa9gq:L5tvNrqJcJN/FBoowTWu","tlshash":"7322a56af6201d7600f206eba5c89af8b96e05d9f107a09978bdcc4d0b41dc319776fb","first_seen":"2026-08-12T01:19:43.375487Z","last_seen":"2026-08-13T18:19:57.97978Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/3f104fb9a20a891a.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.197Z","timestamp":1786645097197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/3f104fb9a20a891a.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-d208\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAg7Rz1EsuE%2FeIINrp1e5nq2EujnqnzZetV3FEIAOC7byaSjOxCjrl%2BSGi19kgdv%2FAKOYgo2gq4kQHgHxV3t%2BSE7HM6uzZ7k%2FIcdCJxpz124V2VTIbo1sSrdqtC5%2BF4k8g0%2FCa4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b17a287131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53768,"size_decoded":54478,"mime_type":"image/png","magic":"PNG image data, 334 x 447, 8-bit colormap, non-interlaced","md5":"efa17cad448708f1e8a186bfb9b3af89","sha1":"818c0a04cf4fe895a21c90f14d92e31845a966e8","sha256":"1204aa4f9b1ed42a3a6ea23677d7f914260824a8d962068090674173f1cf91d8","sha512":"7cb945735e807119915d774b38b9e8a9ae756c65518f101173caeacf0aa038652793cb9baa77ce46f7884ad7a0f7a4185455931e5179da14a30932a4a4689d14","ssdeep":"1536:kw+INigiSmcJJMrv7rRkma702Qx4PvcqJ:kjINigiOSD7FKQx4XcqJ","tlshash":"413302fe8759d9f55ceb9f5584629aee81505b0441323afa910180f5d21f080ec8effe","first_seen":"2026-08-12T01:19:43.378811Z","last_seen":"2026-08-13T18:19:57.980749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/8f58c1fb164b712c.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.211Z","timestamp":1786645097211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/8f58c1fb164b712c.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-a9c2\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpDhhd30gS1VDdYNcVJ0LzBmBAKHKj%2F%2FyoNbzM%2Fe%2BAs0TYer7D6qzdngoQWyWm8G%2ByP%2B%2Be7sMdhmRyzkONjf3X6XfR0tr5pHzgWODD%2Bn6KtQKxtLTk0vsiVzU5zUqO%2FdXGT3gAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b19a337131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43458,"size_decoded":44174,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f5fccc2464f24c2ee6b262c8e8e87b1a","sha1":"f8ea6850ccb9635c82e077a1c7f8965f919c7ccf","sha256":"64cb45a9e6ffed4a0ed998082ce00d225f67f3cea1db0493b97979bed6ba1742","sha512":"46b0b8f9aa079ee21de53b1970dd82c4585766b7d43bc9599aa3baa612a7a5cc97e10b33fcba50952f7f2b035eb1825c024c75b0fcedcaaaa8e683b92ba424f9","ssdeep":"768:xhcKa9KWmZr7+PnSMIKUoz+nW5DlLKk8wQB3+NXluP4BeY47u2i/TUM:fVa9Jm17+aMIrod5hv8wQYXlMY4B+J","tlshash":"5713f2f6c233d8ea87664cc9737f5e1058848da498f640b09f883e97ae49fb16435dc9","first_seen":"2026-08-12T01:19:43.379981Z","last_seen":"2026-08-13T18:19:57.981612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c5a307e4e32c27a9.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.241Z","timestamp":1786645097241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c5a307e4e32c27a9.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-2cdaf\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRxJiwfy7B73J32%2F7XQFmGCia9kqt%2BHNLzFzxP3KQ8seaJP1hQghbBCjl6zAjmftf5itCwVWfPqUMbZ%2BpTzJnwZhpSCuAhNShD7fdPuAifSBNjnufSN%2BGy9Rlk3FWfZlIA4vNDw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ba407131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 183727\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183727,"size_decoded":184433,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"62ddaaf98162e9b3eccecc2502e7e312","sha1":"20e3c6f5a314ccd9303df543c5059efd46026246","sha256":"a281b445ab7778c251351541e44047f1348460abbfa5750e9edb3f4988889274","sha512":"3b47fd0d9d0eef590851aa4b2f2892bdcff44b8c5e570cc1726c8f56fcdaf3671e039ae38718802e556393294aea190cd94d22742c76affad7b2d4a8bc7b59a6","ssdeep":"3072:A0qvo4EKL5IlpYbyPKtxR2ahJm6qwI8K3Rdu1ZeWbeSEpdu2SJD6DDvyCeFQRl:A0qv6KL62xRBhJmvwLSRduDbPEHu2jv9","tlshash":"37041212e825f9e39575e5514a1c0c24b73ae121d8630ef0e2739f6bee3ce498477623","first_seen":"2026-08-12T01:19:43.381135Z","last_seen":"2026-08-13T18:19:57.982456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/75d4869fc6fe216d.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.592Z","timestamp":1786645097592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/75d4869fc6fe216d.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-ad7e\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJgIFfCSgYIeBlnG7Ywx0CfezU%2B6gA2E4FUVwDWOf6PlXYx1zhNaAfFXJVZ8uvzJ%2BzW7ZyENSYpdnYGbqHc%2BMLjAgC7r26fs3hjaChZOi0pTG6ZFKw7Z2NR60OJdpzhNqEw8jQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3ea717131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44414,"size_decoded":45116,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"70abac0ab644ec158901ecfcf6c5e54d","sha1":"05cd21af9984b0392703485f8c25b8ef66f228fb","sha256":"c502876b88a225e197f2b1ad5623b73fe18f67381a84e191589774d15eca57f2","sha512":"0aab1b9afc0e1628ca68caabda8a485be7ffc54f3a84f0a7cc2fd7601583a6e46e95df5a665aba57b4c45ef0d5554b5f22c456568cee0a8618e5b218361656e6","ssdeep":"768:p6NSo4TI4WoHeFPR3aDs6lxDPwQXPdWRlFJ0aPh4xhaMOpHim2hRYStPrF5tcNgH:p60ZTGdF6XPvIFaYhJdi3RYSfHcNgWHY","tlshash":"c313029da5738192a5ac8051c83d1816d20787fffe8e6741e7b34915f0a563378252fe","first_seen":"2026-08-12T01:19:43.264395Z","last_seen":"2026-08-13T18:19:57.983316Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/a99c6637c570b9c2.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.814Z","timestamp":1786645096814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/a99c6637c570b9c2.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3acf\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOlXhVjq9f0Vkw8DhJ8%2FJVmXPMdmSYALFB65%2FqLpy916OapU9ZJnXnaIbvzzh3uWnkbemKKfp0kD04iTiJvsum1qlnqR2blOERx4fnLQ1UL8eK6v%2BhNblOnkXR7YhbmA%2BfYBd88%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19da7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15055,"size_decoded":7314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71b0cdc08f2e394ee68edba419f8f6cd","sha1":"080e4135d7b8341f2d5fe0423434aa27ffad26e1","sha256":"41eb6408925a8dd142a33ef5498b9323ecfad8b19d5d8f3f2259c7f631293614","sha512":"7e08104eeb94788abda5e566bda1232d3950e781f6ad5eedef1e8a862c43478b7e490fd950462df7884264806df47fa2f89622bf7dc5b31908c482a0ad243f2c","ssdeep":"384:R1RaCpfcgdwiPX8A1N6y3bs8jOPYYtybJMZxajd:R1RVfcgdDXHbs8ix8MZY5","tlshash":"4262facd3f7496e4f485e2fbff22109c7e1fa4fbaa4589b5c35d4e089442428de85891","first_seen":"2026-06-07T03:39:13.584528Z","last_seen":"2026-08-13T18:19:57.985323Z","times_seen":12,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f437aed6a89fa922.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.861Z","timestamp":1786645096861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f437aed6a89fa922.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-4268\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcMD1wUNTcWUVM9SaFMUpbFY2VIiNtTuhbu2ewSPe%2FYDf8UN8saWxsC3KP5Cp%2BOBFZsVPRdADSXzFFLLZeoweRVpqfff7NR2W9IkpDTfViLc8EmGqjJFgMAu4K8M4dELh8bgy34%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59f47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17000,"size_decoded":4005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08b1828b08a92ed503ab5e79c839da28","sha1":"4f85c56ed7e08d9f83a4e71ef210dea60da55080","sha256":"fd0b6b7d9aacc65916b9bc917cb11447817a3eaaad1b74d22ec09534bab2aee2","sha512":"3b40210e44fe7059d67e4821ca1113d2536120c60018fef094510a61560187c5798ab7cf284c686aae127362b2c574a6eb82a3ae0c757e3812630f568d945d89","ssdeep":"384:CjSUxt5J5FxOxw8QXWdnLmQUIaqHnvisph849dN1rkmRLC5JcirOZCoLCPv:CSGOx/iRPv","tlshash":"407242eca3383692e9dc7b964f4bd5258961e7f0d9d29018c7102d753c84b8acdad8cb","first_seen":"2025-01-29T03:17:51.175095Z","last_seen":"2026-08-13T18:19:57.986301Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2ba2232-9d9f-4eed-868f-62dfae496dd4.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"b2ba2232-9d9f-4eed-868f-62dfae496dd4.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"65.9.46.126","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.064Z","timestamp":1786645097064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anjcdn.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 09 Sep 2025 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:BB:D8:6E:0B:96:2F:6B:79:F4:51:03:9E:0B:82:DF:B3:89:F2:61","sha256":"FF:12:4C:5C:69:6A:A0:75:A5:73:2B:7B:4D:C8:C5:4D:08:45:4A:89:9C:9B:40:21:53:78:BB:ED:95:B5:55:19"}}},"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: b2ba2232-9d9f-4eed-868f-62dfae496dd4.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 68\r\ndate: Tue, 21 Jul 2026 07:23:44 GMT\r\nlast-modified: Tue, 15 Dec 2020 08:04:53 GMT\r\netag: \"e679fbd466a2d656f194a5da4fa083cd\"\r\ncache-control: no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5ed6c615030689b753623a96db36dbd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: IAoCbTXj7CYtPubfcpq33wm5Piq9CiAGZd8LGu5Jm3rq8Fkxo2cYuA==\r\nage: 2026474\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":575,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"e679fbd466a2d656f194a5da4fa083cd","sha1":"2aa795c7607aa6ea41313be88f1b7a9c1ab516b3","sha256":"f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710","sha512":"50664f290367739604eb9e215554e7dc73e8e619f2e563fc597c831eb6b7cdd255425495a01bd73e8fb37ff2319d4e0943e11bca28651d19b2894e39bea9c9e5","ssdeep":"","tlshash":"9ba022c233c0bc3cc2ce0833c0000220f830000b0a088c08a000f0203e223e8008c3c2","first_seen":"2023-04-05T18:15:05Z","last_seen":"2026-08-13T20:36:53.657323Z","times_seen":10233,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":31,"connect":11,"send":0,"wait":12,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4a928b713b29c016.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.243Z","timestamp":1786645097243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4a928b713b29c016.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3e0b8\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4%2BPw3kNs9nMycqQ87P32QirnL%2BuXQTezi1q3gnF3ByN3V8twUZrNn4pTTmqbcPVTAC5nEuzT9S6dA59bQHGg6Q6TBufiTd8xNJcrle4AlRjyLEp%2FUO8yUkbg7RDLSmoLH8OvpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ca417131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 254136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254136,"size_decoded":254840,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"09f5565f70334a21e77e668d175fe607","sha1":"cd1169f9d42dde6528a512d7a43e8912e01db3d7","sha256":"4b252e7d08ccc6415f5866471f71b89eb25021ab3d34cc5c296a77de07f91a01","sha512":"9e92f4fe04b7c964ffa9a0839debb945c7581f715aba9cfc855f203cb94600dc90975a5df4393302a1c3b0a6b7291cba842a220c30f214babde0c74089ab7103","ssdeep":"6144:611LbpOdef8GmO18pScXB8fMziQ73QQ/xXJRDoEe9w:6nvf8GmM8piyiiFVDDTe9w","tlshash":"74441383c340b4e6278b62af972d3508d4419e6c405ae8778f7818a9bb3d685dfdfc94","first_seen":"2026-08-12T01:19:43.318952Z","last_seen":"2026-08-13T18:19:57.988151Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/fonts/roboto.css","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.766Z","timestamp":1786645096766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/fonts/roboto.css HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: text/css\r\netag: W/\"6a7969b1-3303\"\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HySxBMRPJBRTK1sWI3Oq2dtG4klDihyucUzLlaqmau6MdvZE2jhFSUhvJ55d%2B5qVIErzuLMaVBVy%2BvZs%2BqF5uFPEYh%2Bur8aU6rTst%2FnBSKHSMNdVmYtfNpZBTnixNiBd7GQZu%2Bo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aec9b97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":2220,"mime_type":"text/css","magic":"ASCII text, with very long lines (13059), with no line terminators","md5":"39e20e1a1aaa5a3780c881329a9ce88e","sha1":"bfbdc60061595ed780b42f0084f4c796aba88cff","sha256":"b53d51803bdf541d67bc5d79a272c744feffd23f59cc80db173bb44b0a3759af","sha512":"87597cebe4df6ff7aa6da424be142fe9f58f2a65c627e706355e1548b1a5037e2196c54a4e710fa2252328d91e583755c510b4b37730263fe61ee264ea133ef9","ssdeep":"192:MJIfOHRXFQDB3sJJfOHRAFZDy3GJPfOHRSFnD03O:MJIfgRXWsJJfgRAsGJPfgRScO","tlshash":"e842ee34445a7440d3e788a331ce7e87750c9111a3aa1133f62da998dfdb9bb17f8324","first_seen":"2026-08-12T01:19:43.257236Z","last_seen":"2026-08-13T18:19:57.990131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/8525f4b847e3fe44.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.800Z","timestamp":1786645096800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/8525f4b847e3fe44.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3e7a\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zA9M%2FbKzcPgjkFl7j%2BcHTdcdOMmXeiuepJXMl4b3Bzu9NtztrsrzD0nvcLVGDGj8sDpE0BMeq05PjUHbPynFwrEhyOkGM4I6%2BxmBHwQGmd%2FxilN9hInAt0pi8EsgeyHj2qaA8Dg%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9cd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15994,"size_decoded":7162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5865bc7280f971a779e7cf5c986e97d","sha1":"8bc93873c60c6416f9663b5e71c3f673b8985004","sha256":"c93e0ce65d2934c5897634ce17b258ec8b3b94355560b7083c65f67b69e474cb","sha512":"253400b49f7514456953f1359c49af2089aab97edd33e5710f9b0dc52d41ef40d1491f79b36925af45032d77d139657fa602e85b01b678d853ae60b4b15a97ec","ssdeep":"384:FnACaiYbk/+0RRQCXzLTjJ9Ko/mkuMuY9RMYifzI3bC:0C+0Rlqo/myrMBzom","tlshash":"a57293e023f9a3f4f109b3fd862655a17e9326ec7781caa9c7a92c00f51506d1e8d8d6","first_seen":"2025-08-17T06:01:39.522666Z","last_seen":"2026-08-13T18:19:57.991413Z","times_seen":67,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/a3d0a97d8bbf2a6e.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.172Z","timestamp":1786645097172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/a3d0a97d8bbf2a6e.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-294ca\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmNFEdNjLSIKxbiwCcMEdZ6fnR3bq8bphFL69E879Ao%2BxLGDO0rSez134YElv6qfmZL%2Bii0LzTStqIQW6z4cctGd%2BQN1VSvSofMA1LOASLXgOm3F3dVp8O5efXyoV%2FMsn4fYBw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b15a1b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 169162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169162,"size_decoded":169868,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"1bac7cd4eb1cbda23968847a7865b853","sha1":"c987b74b33d874523808e892fd9dddb6df13fff1","sha256":"5e46613960209c6a4c2b43b66e87bb13a8cb00b6c308abc18c382c0a3767ceea","sha512":"a861c95b4b8b22951bb18a6fb180a919cddc4763e38f8254c836a313abde48a2aa1bf32dde01b35f80fb629d7921d22e7c341c8209a77ed1caf8367e745d019c","ssdeep":"3072:YnNMvipVhva/yWspz5U/ks2iZJ3kK/AJ2OIHkOTnjG164RYOyWiPuv2bVnVcB:YyviRYsvUcs2i/3kbJ8jG164uOqS0FU","tlshash":"73f31227e28c293da79d100235630bdc7e552a54ba92efdd6456fe00f5ebab1390ccd2","first_seen":"2026-08-12T01:19:43.317945Z","last_seen":"2026-08-13T18:19:57.993549Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1fb7c07614aa67bb.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.247Z","timestamp":1786645097247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1fb7c07614aa67bb.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3960a\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWq5gZJPYe3Cl6e0MmHdjSBol1dynw6%2BWZRZ%2F9%2Fzs0TTXdsLeKUY4AG8TfmFPnDPkrWYvtfNAlD6W1Zmq7plhrLm%2BvOq6Xm2p8ImBAAVmsi38578lmqRtfjWXMwuToWbOH7mleQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ca447131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 235018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235018,"size_decoded":235724,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"c5435e40a87844c86bca79a141e83083","sha1":"dfa41f1ed96d2a3dee3ae794bd82d427b037233f","sha256":"f7ed3a8c514bbcded677e10c8d17f5aa0f3267d6414ce70ef098882c7d4e660e","sha512":"5b92409e3712ab66b166e8b602b2085512079e9294900380323734c1567f6356ad360524512da6c0842f2129488585377f973201ecfc9f01f5ad257f2d9424fc","ssdeep":"3072:+0EwMV5ajf1wHmS5850BjHR9A8i5/6jdHOK4p1HM+xw3O+bQEq5xKTjBOgQ6Vtd3:9MmjNwk50VDAlV6i5S+FE+KfheC","tlshash":"b93412187be1e880f4ade7bc62b17c52cb15523e6b29e3451bdde90a40d188b99f90c3","first_seen":"2026-08-12T01:19:43.266609Z","last_seen":"2026-08-13T18:19:57.994447Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/d1906682fefaa35f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.802Z","timestamp":1786645096802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/d1906682fefaa35f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1b3c\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FhH0oOSj72FVHyj3sZywmIhybtAE3PeBoFzfZISz8SZLWIBPsBadP5RbuapluQGSGaE2fWEOU1lZesBDWSXjTOHlmjSMb92am0XEf%2Bf0Ua%2FgCdx3Ox5qvKPcrz3CytM5tEthXo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9cf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6972,"size_decoded":3782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f35e9b3b25220a426b1cc04176ae64bc","sha1":"cd3afce31e93c0e4fc2b947e98fc3a75e5d7a6e2","sha256":"2bca7bc517801062d563685a186b16a1af57fe49dc102a0316b9d6bf7d15bed6","sha512":"a06b973be771e8dde6ef7b845ac1b467dc7e0da0f0a5ab506ad7988761ed622b456191acb1d930bf01ff5997141d906f05e4110669620c00b94377da41d04058","ssdeep":"192:1xPC39rg46MtdW0WUs1nAMbBUbT/qKB4bVCDEc:1ZCt84v8hAOBUbbqKGQDEc","tlshash":"cce155d43276f3b8e042b2fcc53a356aff1b1cd0b709a468c3d15e576d0716a88858ea","first_seen":"2025-04-11T16:57:52.644849Z","last_seen":"2026-08-13T18:19:57.995354Z","times_seen":226,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/468292723bf4cb34.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.817Z","timestamp":1786645096817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/468292723bf4cb34.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-de6\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pXE4LcE%2BeWMis4VHxx570i%2Byo7VDL4r0AS%2BaByh1XYdTTFpNO0YIcoTn6bLEkvbEgA7Ny8mIJbRjV1ko0KRBraHrEujNv%2BbGcWscXnl84566J46e%2BoyjByYjnS1MdOitwlIhbg%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19dc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3558,"size_decoded":2388,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e67708be1541e3094dfc3a42425fc00f","sha1":"01838936d595caa314a05fb360ae8a778c76d436","sha256":"c3b3893d3e1905ef62a3c1f7d91ae747bede2562fd6177d06875b4394da2b1df","sha512":"c73d827363bb2b98a7887ff52bfe3db0c8e49058e518bb8b592e4da8317810ca78758959f3db906cfcf68fbf6712238ae32d9e598698f3e755b6d4caa7b8807a","ssdeep":"","tlshash":"ab71b3e817b146f8d480e7e6ef19a4e4390755ea2d0a802ac7782c0862556af9e24cc3","first_seen":"2026-06-14T08:39:52.594859Z","last_seen":"2026-08-13T18:19:57.996253Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/rewards/ranks/gold.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.196Z","timestamp":1786645097196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/rewards/ranks/gold.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 632\r\ndate: Wed, 12 Aug 2026 16:20:56 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:56 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"eaa6cb2b0c812156a42025633edf39a7\"\r\nx-cpu-on-cache-miss: 203\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: 44bdacc1-4b30-442a-ad65-e566e1818352\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: AyjsL60shJiiMKS60bdDn3kCcqGH9IMfBAin4NmGE9Y59BN1DbhLpA==\r\nage: 93441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":632,"size_decoded":1485,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eaa6cb2b0c812156a42025633edf39a7","sha1":"ef75c1df41762cbdcd53fc8ac748979a0c4954f1","sha256":"602f1034b024940d9d9299c2d7f07f512b0697bc4e3e0e3dc62650a3bcb24bdf","sha512":"28526cec5bdff9fe596af3834d2d27fb0cca9db105567f572a1332e5ac777290dcbbac056ee77433e97719fc2ae410f994daea983167e45e78630484e15d20e4","ssdeep":"","tlshash":"fcf068849d4578b6e057c52550dcda8bf0e4f24cad9518c4e70615d0130b258f5c3b8d","first_seen":"2026-06-14T08:39:52.500617Z","last_seen":"2026-08-13T18:19:57.997157Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b234d75ba836d900.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.827Z","timestamp":1786645096827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b234d75ba836d900.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3145\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDTrKaPbpFnDJrNZqjLeujzjAaeRp%2FHA1RCW64QCPcbiDSYJpmQSzyZBkgK%2FGmXSvQerHBnSF7almTIiHsdwWwzDJFqH8GlY4vUN35ExRUBJLdEtA5t1x9D%2F4BIjEBowBze34SI%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12613,"size_decoded":6046,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6945f6c28ac66d41438eae984043a0be","sha1":"663bf302828ec3d5b0edeeca334d98a1aace346e","sha256":"fdeeee83e3475fe9e9ec9fc12a996236887958aa6596537654d175f392e15ff2","sha512":"9d00560e7efba62dc9cb00edc91133f157bff5df286d09d1063eccc70b6210fe36ba5db9e68294c948443a880b1e444a23df26463c6f8a67be3ecc88c30c29ce","ssdeep":"192:qnoCuFvU/8MvQQa1dluc3L9pCQn+fewh+XqYJesFQMs1DbKnimub4MFbMkjYAmjZ:qnhqTCcCA7FLNMFb/qtZ","tlshash":"3542d7c8277a53f8f941b3fcca2710b1bf9b18f9768085b5c3e12d58a81509e9d964e3","first_seen":"2025-06-22T09:39:41.689736Z","last_seen":"2026-08-13T18:19:57.997991Z","times_seen":33,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/dab229fc8347ad1c.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.859Z","timestamp":1786645096859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/dab229fc8347ad1c.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-7db5\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySshEeeuA6HTD8pBXsD1KVObJ1p9WDsYESc4qk2POseXfkjHECi%2FWvqiAV5kAUdYdjftoqGycd4PqiGRHEAjsbObgF6WvJSWaNJZUsgKNodc%2F7TenrOIMh%2FSsXoKwGSC0s%2FfyyI%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59f37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32181,"size_decoded":13325,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25edeaaa2ce6dff70b9c334c8101bafc","sha1":"93f98dc0971484c43da1a4c66d78935e1c0dbaf7","sha256":"761d31da25c4ae54846c766b2034c0b9a6b16594263c0ba826104f3c2ae35ddd","sha512":"236e840090426ea6c8f012f056e065e1b08e951b39edffa9315789a980a21eb3b74136ab7bf20b525369f372826aea3bcd37c081afe5b6f25e8d85d889f1e26e","ssdeep":"768:9heZbEVbUdhW4KrTBhF2mdw4aaHiysj8dSt2iW1xmY:DOCwS4KB0A","tlshash":"1be2a4ed1ba8b3f4e8c2b3eada162569ff0960f96b449b74c3545d4a74430fdc8888c5","first_seen":"2025-01-29T03:17:51.185737Z","last_seen":"2026-08-13T18:19:57.998821Z","times_seen":140,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/619303ca34cf8ae9.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.167Z","timestamp":1786645097167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/619303ca34cf8ae9.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-12540\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPssMhaNFj4jbrIM0hHqP3edjKu%2FqrOdpklGl9t2ppbKKfFhtdrXvPKfTH%2BV3Ln4H%2BWCkYxYP19JXzNNCeNsZot3m%2BwTXX3hVmmrRdQ5GeJgURT3cEXcM0yqm29l8F0u3Hr6jg4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b14a187131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75072,"size_decoded":75777,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9639b04b503c9cbbb1689f76f46bf2e3","sha1":"33f48cf809e9fcd983933b4062f035d865d92039","sha256":"b491004886d82021ce98d6ff9a79e9978b08a45177e6faef44d5d46a33297e6c","sha512":"c3df81f4348f878c0b2a5fc8a63ccc3d4d3307dbcd9fc465a7ad970b815b5af049245046f0f4dffbfbba2162101fd6cb0d4091ef3452266d458d41a30ed8a006","ssdeep":"1536:TlEP10ymSzxej9C7X/GpRSVfpI14sKiEsJ1Z4MH0dB2us2ROUb:uiy9u9CbdiRpEsJwMgBPOUb","tlshash":"1073f1cab85f2710c343a6eed9553c892fb096c9c4d37ea50e6cca721914187274eb8f","first_seen":"2026-08-12T01:19:43.293944Z","last_seen":"2026-08-13T18:19:57.99969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/8f7c17b6eb0968ab.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.264Z","timestamp":1786645097264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/8f7c17b6eb0968ab.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-10b57\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lceQxZozuAQq9ladYrnHBJFm7OsauRO1qqxncLNWlZPTPfEtgaU7b%2B9FvRl4T69sykN2jPyfrugzr2uuIMmYa01k29Na0l5YGeuOtKRQKj2BBq8pk38pNQVT4NuFHxL2JZbezP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ea4e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68439,"size_decoded":69138,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"ce480c64ab630b0f2d2763267db5c170","sha1":"5cc8857eb672014a77aa27a949b91ad9d702c023","sha256":"f27b1fdb79872008d7abe61c76f800848a36c4146f865699f87bff821a0b148a","sha512":"09fba4654c2427f61176255cca6124554a92d07dcf7104487afb812addaaf06f0fbfe6df34b3799b0658c4b4edc6d152bc21804fa72a0d6ec833abadfafa1603","ssdeep":"1536:EZoeratwoVxv+N7CIFJts92zIWUHe9lEeqlSrI9t0kkGoPU:EvWv+NCIFJtsg7OClEeqlQqt0EoPU","tlshash":"b7630210f9f617e2c88ee4d2451805697c0fd107fa480230edeac5bd6a99953bbb9a36","first_seen":"2026-08-12T01:19:43.279849Z","last_seen":"2026-08-13T18:19:58.00055Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/a15b1ef6125a3e97.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.599Z","timestamp":1786645097599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/a15b1ef6125a3e97.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-28de3\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBu2lpAPiLSB3AHm6drugxijZpgn0Qm5bUSuPfXViYtFel%2B7Cn8%2FMlt%2BJ%2FHKJxQllz%2Bcuv7MwHHjfbrPB3OmuRqEc0E9Td31FEVtknoSed3hnigXpUzcvwLPQxQCZoFsrzwNdDU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa767131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167395\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167395,"size_decoded":168103,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"158819dcea4445b3280d2ce86006d595","sha1":"2e678f3113ab10dea1501429225c933c6dec2062","sha256":"5ca93ca55da59d93336ecba4d7fe596b8a5d77cbedf5d3a7453f4e7f854a32fd","sha512":"a3809088495899f842aaa196727629f44861569d84adf2f5c7d1f43c37e6fdf3bcde93d76e3d6d208e87136588eefa9228fd66926b592e9455bfee00168e7cb0","ssdeep":"3072:pAeznqWtz04XXq1E9VHgFD3GYNZiDD87atrm2f+GzKGHexcU2C7hXrUtrCCHFpI8:ptL/tz04XXqu99gd2Ts2k2G8exZjhYtj","tlshash":"ecf32360997297b5236ef2294c021eec1dd45a8fde35413667abe0c20983bf065773fa","first_seen":"2026-08-12T01:19:43.376472Z","last_seen":"2026-08-13T18:19:58.001481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/432b3879f5ec38a5.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.603Z","timestamp":1786645097603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/432b3879f5ec38a5.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-12689\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqunFYYfrDhu0ElE1vGl7PdFc3k5YloHECgzbWwUj4hk0%2F3yYOO61l8FNY39C6CyWSkvLUE33gpu3NTGdjOhzGQ%2Bzs1jDC7lfuotyfx2iTaZa8Mxu7RvCl9kJSxjWIrXK4%2FEBZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b40a7a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75401\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75401,"size_decoded":76104,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"b378359e94d44119cd7b90c85acaa0dd","sha1":"435f9004c5e6c577b29add4e85ba4daf3d4ee739","sha256":"3661e386fe87e8f897fd5cfc45ab1748d9b3474ec1e7adeb68d397223c59076f","sha512":"fbca9ac24042cb48ebb7f44820ed3423024f0cfb204c5327152c6c2d36dd74edd0d4afefe92ab7bde56c32f318dfa782c8512a251a031cc0d0f5c265509d5644","ssdeep":"1536:c+nZPXnpnkqnMt09qEQ5y5j25NJRmltEAPXSew0zzxM0ea0w8iALyF8QtIuE:csPXpKSQEr8NmltjSew03Vead8u8QtI","tlshash":"51730230c5c68139b915e6dd96fcbc890d841a76404c73b83b096ed4b5abd2ec158b1e","first_seen":"2026-08-12T01:19:43.256252Z","last_seen":"2026-08-13T18:19:58.002395Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-64/race/shadowed-race-crown.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.139Z","timestamp":1786645097139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-64/race/shadowed-race-crown.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 1208\r\ndate: Wed, 12 Aug 2026 16:20:57 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:57 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"8f7caa475cb73b93721a09227506a8c7\"\r\nx-cpu-on-cache-miss: 169\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: ccbdfa4a-5304-471a-8e03-c0cb0149cb04\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: WLQ0wbwf1ugtO7uP8fkIIAVacwj4vAO02MIpjOnzEXkk9cB3ojaJXw==\r\nage: 93440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1208,"size_decoded":2062,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f7caa475cb73b93721a09227506a8c7","sha1":"61b79344b82ec6f4a5d53c9c664c1d0793afb452","sha256":"ad213e9fef64d18769e92a9f36cbb0936abe668372a10971e13755ced1d85c4a","sha512":"5f6008aab91258b11a2755a5e98fb5ec5bc2a0831810d3152471b196c58d065c3fe5a92b7a63c84b537ed108f6ef575347bcbf8ce48fca5b7cf3002e2cd3e804","ssdeep":"","tlshash":"5521b764a96ae628c573253303b71168f19b3f61085ad520b05528b43e5cc96c944eba","first_seen":"2026-06-14T08:39:52.308756Z","last_seen":"2026-08-13T18:19:58.003214Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":8,"connect":14,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/fc18dc3ce6b6265d.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.226Z","timestamp":1786645097226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/fc18dc3ce6b6265d.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3e82b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH99KMaDGewBbah1U60qHQoeGsvrVGaH12hVagKK%2FBFpG9Ca1%2BMDlGft9WbSnqPFYsqsQvVD6Wn1rpjViILmkGjaKcjWgkRueL2%2BP2B%2FTZQsMcJ8W%2BBFFspMnAcP76%2BRjuMPoTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1aa3b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 256043\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256043,"size_decoded":256753,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"61e990e433e87bfe59b847d9d8a49b4b","sha1":"d2d53221c5c29de0ecfbf827fc1874a81f59af38","sha256":"f42c76676a0463ef518c4064482889cc61888f56fe57ba069014d45a8499d2d6","sha512":"e07e2973e772676f1cc0a30452696ae935ae4627e94d7df645134d72ec6be72a3819c94136889b5e2399ccf971c532eb7ede082d9fd14feabd4fa0f18209aee3","ssdeep":"6144:F3zgJCOuJizPGjNrkG94G5Ppw4dXHKNIe/z:FjgsizPuN7rmC3neL","tlshash":"d1442274303b42f032a5bbb5e2cdd2a6ef25bd5aced07c7ce0e94dea9185c54805b660","first_seen":"2026-08-12T01:19:43.311089Z","last_seen":"2026-08-13T18:19:58.004085Z","times_seen":4,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/62d80cf3bc0f2182.webp","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.257Z","timestamp":1786645097257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/62d80cf3bc0f2182.webp HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-347a\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQzhNJgejnpnG1MC94jjfY5PJQ0KjVD9Z32ex9YivPNRkDUmkCBqemWFmnHShRwCZEnX2mDmceRjMri7cCilcXB7qMlpfVvzTMQEkqvwxvTSdYdkYndFl38%2BQEbkmkgwoww73gw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1da497131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13434\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13434,"size_decoded":14133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b1f02c102bacd9fb76c43c06f793e19","sha1":"f173a9118a138edc4379892489f250aca9433b55","sha256":"d7eea8aecc0700a8439ed50a43bd1d619c4e1521b511a2a1f1516da065da4e26","sha512":"12412fe9d28b694a440f9223eac719cfec57157d69decdb65a6ce8aac11f064bcdb33f798114c5013cc59775676a5eb19c157eabdfe4c2206403100662632c3d","ssdeep":"384:vUs8kTZ6bEn/egoD/iYXfw7qdKCVKhTuS:vUsxjegc/jY7q4zxuS","tlshash":"e952cfd857089c6fc5b03eb25e41e7555cea72025d99ccf3aa5af223fcc687804f4222","first_seen":"2026-08-12T01:19:43.312024Z","last_seen":"2026-08-13T18:19:58.005031Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2f6b511358288f63.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.822Z","timestamp":1786645096822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2f6b511358288f63.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-129a9\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5hqgb%2BqbtON07ecPuPgTvCSulsfwt%2FnhBNK0N%2B6UGWfpjMSrOp04r2mnYMUC8ZuV%2BXz%2FXrlklzHKsoMNMpsAzhi3jX9MWSq8X4vPsyU10OR7aAH7uhvnsK2r0quXq9osccJNp4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af19df7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76201,"size_decoded":50397,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29c2b49a15a0daf178c3609afe221894","sha1":"51a0914a7fd53e85b27f28494c7df63256f87879","sha256":"1a8b84a85afae066c2770b7f996cdbba9efcfdaf7a35b03d3a1f058ede5cb1ce","sha512":"443ac9cd58f0047413c0f72382e18e55e4e3e13c13beaa4b87a821f1bc81697be7ba01a6a12915bd03851df238e03e824a314cebf88b1a91bcf3c122d7c4109e","ssdeep":"1536:5dWYpQtycleWcguqZPWv2vbbkkkkkhpkkkkvkpdkksDp+pTk8xZxS5H4ciscaNF7:5QYpqBeW5ZPWvAb7HxZU5YciANFn/z","tlshash":"aa73aebb214f388dbb235c88540436456ca9b9eba364d1c5bdcd44dba2fe468cc34af1","first_seen":"2026-06-07T03:39:13.608372Z","last_seen":"2026-08-13T18:19:58.007327Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/52167f1f455d4465.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.173Z","timestamp":1786645097173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/52167f1f455d4465.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3fcda\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNFlCnRFfkizuQfp6%2BIU2jX%2B95AGYoG%2Bn5JDUy6nrm9LUhNj1NpI3h963S4NOj9BSpmQD0jXJRWhPwIzbUbVf7JFsKtAgFh1IG0MaHeIgK7G1PFWEAY7PVI0YXy8QXbpsJ3tn6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b15a1c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 261338\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261338,"size_decoded":262042,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"d054a18f981632e0e4fca96729bf5cab","sha1":"e16049d199e6c96ae54dea06f66f0e75e377459c","sha256":"84d20b6e2c6d4997265f2fe5869fa4c342c2f23d352cdaf074b2f640a16f3a8e","sha512":"8d9a167a81d6a8ecde9dbf095adae9d009e20ec4165c5e187cacdeef883d1844bd61c5fdaecd63b5574122e90a3e079224b77e8e52c3eefd1f68ce4ece95537f","ssdeep":"6144:Wds7JrXURCktsCwU+YHd3zKXhtifJOWCH8OxoGNcKwmxogfAle5q8v8V92Oqm:WCrOCmvwUt9jKX3ifJFc8OSG6o5fAlea","tlshash":"694423f65ffe1aee2558d8dda5832f5baa4033572c0bce1076bcc508b1049dde66288d","first_seen":"2026-08-12T01:19:43.28352Z","last_seen":"2026-08-13T18:19:58.008394Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6f8b9e2a7a864694.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.229Z","timestamp":1786645097229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6f8b9e2a7a864694.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-37460\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRQeAcw20FtV5oWQCKyIrPanhWPNErHLwXTHWcZ6%2FV9rmO0LNOQNlSanzqF2s4ZqWWLj33P08J2mCdaPzKoipV0cGf%2By9IZR72YgWI6HL7OwWqVVVfK3vovnZ%2BNCkD5qtLLhFpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ba3c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 226400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226400,"size_decoded":227104,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"1b2dd9c9dd648f0b4f5a90219bb024b4","sha1":"6c4eb2a9a41486c3b093d90dd6b546a5772c6022","sha256":"870c8c53c60f5ecda3c27740a27c8aa640e247332f108092520a5be44044f0b5","sha512":"69139eccdd83318ada98c54c7bf76387713b63d9cfad784c1ff34b5e66d77f387629cfc5d181d11462f4728d2b133d35fefee4c7220b2b9a978d6670673b3bbd","ssdeep":"6144:gAiMhJ+GHScZPfERUJzIFtzVAnnyFpvtlRQ+:gYu4S/UJzIFtzVA0pv3RQ+","tlshash":"252423d84b86793f8af2cd7e95545631db815826e3dbfcb5ecc151f8920027d428e44e","first_seen":"2026-08-12T01:19:43.276251Z","last_seen":"2026-08-13T18:19:58.009523Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6f3f47fca903befc.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.810Z","timestamp":1786645096810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6f3f47fca903befc.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-31f6\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhiuSlpShDFydSrhhVeJ4d2qqHw9Is50xKEvJswM6IVZi7SKFi2zdQquEvPH1vvyCL7ohgU4GbuLbV%2FCbqNBow%2Bvg3OSnGPkVhw8sDQlG60wQKSxcXrjpOkH3TLOWLs3pQ5VT5k%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af09d77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12790,"size_decoded":6156,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67fd646dd2767fbd294fae6e1c0cc34e","sha1":"c8184dd34b4b9ae8b733f2c5d395e2ea59611351","sha256":"fe3f9cf965f32aee6408aca952d3d285730d23114efb9512bbd7b66658aabc70","sha512":"ca05f3473e949163a2d21373babedaa928f55fc84d740b41b7449b4008b6240879e6520d6b2e9b610b6bd4b95d65c88f4206fe9a98601e0b9a559ef2c2854994","ssdeep":"192:FZF3UiGZ3pXLj7u/GYPyntQ9ID8tB4xWb0FEPL9Pan/cncK3hATLuKUp+c:Siu5L3uOYC8tmobO4C/cc3TL4pt","tlshash":"e44285d02b7693f8f586f7fdc23b1ad1be1628ed73448465c3706c85a94213d8a998e3","first_seen":"2024-08-25T06:37:00Z","last_seen":"2026-08-13T20:36:53.588558Z","times_seen":347,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/cbedb86389b57ce2.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.875Z","timestamp":1786645096875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/cbedb86389b57ce2.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2ac\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FhJjPI9XfXrrjU9HBa7wP3CiIyISGVosqDkWhNnIfA4rBM3M%2BE%2F06bUB2r%2FvxIkjgD3QRSKJz3LZZFYsQ6%2BxFyfToHCxHlcSqZeLpEIeoWyEWN4fi0jmJjgQ0sq%2F9VzPT8dkuo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af79fd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":1092,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"902cc4553a1f47dfd0e8722f7342a4b4","sha1":"60a3b7fff8714bef8cfc85291a827d2467ae9a51","sha256":"42cf0eb7c84d8fd393ba8e7dc3782c9293a233a4218085b0e1cdbcd0abfb5b0a","sha512":"f1be4f2dd2fe13a8a8b9b48bc45f117bde18fb754ba6bd7d7aa774437124a3e85ce1d3f026d56714e9f4a78d56382b35202892507e03524a34f3c357799d6239","ssdeep":"","tlshash":"5f0102f060e89691120d07093c3834547a12567323cd826833cc07d6ef4f5c2a99bb84","first_seen":"2025-12-01T11:28:00.223509Z","last_seen":"2026-08-13T18:19:58.012596Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4ad9872e17e4031e.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.788Z","timestamp":1786645096788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4ad9872e17e4031e.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-434c\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jYxkvI66ifLpGQ2fdfXX8HwFhi55dx9Px9t5q4zBU3AVMkb9BmcS4ILjWKR6xCWlpMvw8nVo7wGYofzV%2Bk4xJjY2V4JBqmPF4115M0gJ2eC7B1dMtOhbJAErxFq8gBEmOPAdC4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17228,"size_decoded":8051,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b372d0a1e0015b74cba7a42ccca5fa91","sha1":"04a01ce5eb656939de1cb56290c937c41e023920","sha256":"b0c3d9b7f8e40ed1c713a4d1f3f22716fb0b7baf9286977cbb35c8e6d5c8f790","sha512":"f97079ec6fdb5738aaab437628eb4d8907372a427a1836f7e810605794ff41d41434c60a4174d9f59b4dd9114c0689ff893d6a559d5a5721aaa1b915a3b2277c","ssdeep":"384:maJnv0qTjlRWMOrojcY6opbCXGydn492ctp:m2nvRfEH3WydnRI","tlshash":"6672b6d027b9d3f8f526f7ea9622f425bc0b35feba41ca94c3616d40e14411c1d89cea","first_seen":"2025-03-18T16:26:53.604243Z","last_seen":"2026-08-13T20:36:53.58582Z","times_seen":166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/db1eb0a2ae3bdbc6.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.791Z","timestamp":1786645096791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/db1eb0a2ae3bdbc6.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-303\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gp3e5L%2BCn1%2BG%2FUojfOfAyq53SOi42VTGWCK1uT82FD8p9PRnzdnX4w2yk12CcuDZ4bG4TxDFNNCCJG1YDFp9fltHOZLaumLKe19T1C4bzi1dFNWDLSrePNfR4%2B0o1GdSWKmPtPk%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53b168f81deed9f34dd0e31accc7b4de","sha1":"39a20f8cd38cfef68ac8332a284a979231127441","sha256":"6ebab3ed72af9e33ec36dd1d85f01ec8d4914a12dc75060738e999fa79b8fdcc","sha512":"c94ead9886902d2c036bd1b37c8e670eaf2eebde8bf341d556bdad8a30c9fb4c64f65d67bc10023488d89cff330374cfc8da90af1b94f692e4557df98d748e48","ssdeep":"","tlshash":"3801bdc0b1048b785868c5f2f5a5c03c06b454a492ac54fccbc3378230a4ad64e07e0b","first_seen":"2025-04-10T04:11:56.949131Z","last_seen":"2026-08-13T20:36:53.530681Z","times_seen":256,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/7538acb243552fb6.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.833Z","timestamp":1786645096833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/7538acb243552fb6.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2465\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQBgvqVUkCmETZUz0AXuGfcGttYyD26jTNK1Lx%2FKpqdfr8N1bWsJ%2BoQcGylWdM66uBMjKYixEj0blfK01THcmbPwQMOoyTwYbHJye5KosB469DAUnq3XNepI57AhAN8yJVTJslQ%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af39e67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9317,"size_decoded":4153,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1506dd834191dd7a567f753893e39f2","sha1":"5d9fb39096dbf0c680425ebc212ff79229a30822","sha256":"a9a023bb09911015236f4bd790d2f9626f43832d769fb8c5adddc1dbc043e704","sha512":"5d534db333ea86160024b22fc6760e8abf9b0c681ebe6591a4a64db19ca2e51a9c6649943b862f6b51a47205938b4590e1dda3445db0bf0ee113f02fb381d6d3","ssdeep":"192:0TArOgRNFI6pAS0IvyAVkl0kxDnfUgGqSuxt+NxmOq:vOqd0IvUl0g+TO","tlshash":"ef12b4953b3693f8f08af3fac52256507f5279e8b705afa5c3205e06904109d8faacd6","first_seen":"2025-06-16T15:36:45.407334Z","last_seen":"2026-08-13T18:19:58.017789Z","times_seen":43,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/53271e7e93c28326.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.857Z","timestamp":1786645096857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/53271e7e93c28326.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-6cf6\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtiV7z7jvAwDNcYwZObLaN57ytSJRqbGrcTqDR%2BiPm16pwjj%2BA%2BY1Djy8wbMByn3X9C20Pw9cg1hX1mA4JffiAGyOhch1GZr57hLChDTh4grJsKVEDd5G5NVFheX1f15OSfrtmA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59f27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27894,"size_decoded":9921,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"357980b2bd5dd62b8d2b94f5add25193","sha1":"3add4d736a383372fa37a54c74b2ff50f1563a3b","sha256":"77efb7cbfe2b8f89d94b66f236cfd71562e63bd16988f701c55f42e09a1c5360","sha512":"6a78a6ebd9795b46dd45d9cf4a99f6f8bf078b2524de25e36aa5757e073963057d6df78c9076ce540d2cd6f64309c0a9912bc221f0dc41c7a136adccbb45b444","ssdeep":"384:ti8GkzkdGYXe3YgRmRWl9kYMul5QkG+Z+yM/H+x5Uqk+Dr3/bMsO:88N5zAAkYoDg9XbC","tlshash":"f7c275cc2b7887e8bca3e2ffa71344667e159ce7a5818f29c3141d0874975289f46ed2","first_seen":"2026-06-07T03:39:13.492421Z","last_seen":"2026-08-13T18:19:58.018741Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/styles.css","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.768Z","timestamp":1786645096768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: text/css\r\netag: W/\"6a7969b1-7e5fe\"\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ks9qHQzA0zjsF3ejnDDLGF1gq47ylzne%2FfkuZs1xZcJSs9Ob0qdoFkbUIDK3Qmrdi57Cbs0gxpO%2BcLDrCV5b2v0AAI5r%2BZfKA11zu36ERNlRacsd0aCc4BTdLl2cJiXRphYjBMU%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aec9ba7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517630,"size_decoded":75126,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9f89bffdb452928451935ae0b7bb1fcb","sha1":"ae33acfa763bd4e5a1d302fb996f4305e8d6491f","sha256":"b5648d836e92fbb95dc724bcf096cd12bbdcb5deb5e8ed01d6ebcccf9beac6e8","sha512":"3cd23cce39c3448a5587e4a2950989881ec1ab782491edef45e595b94397ccc23c50a2ccb9effb87cc526f0864e1bd38d94f9f2ad55f62081127b105b02051cc","ssdeep":"6144:tdyEN58kdrz7lqaehrNEsJ7oAzjXkcRKQY4zKr3YToQ7yKN9AOL+OVxdqKhayvKi:td6wEHVX4VO","tlshash":"ddb4b412e6a1123f7c2aa0f5f298694cea8bf0d6ef2a5ee4ad44447047d02f52df5f05","first_seen":"2026-08-12T01:19:43.327329Z","last_seen":"2026-08-13T18:19:58.021503Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/74d190d8e441f74c.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.805Z","timestamp":1786645096805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/74d190d8e441f74c.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-21a8\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVhngAJRi859JU9QEoy9c4SVb6OgKprIR8gDCqRH8fwaUVarkWK9o3%2FDT76FcARF6%2Bu38s%2BxftVdNtmGjo%2F0sKNPYpQhV%2BhXdkoa%2FFH81vKCGHz%2FjwPlPNlatcxCbgd5Ci6L30Q%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af09d27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8616,"size_decoded":4564,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db816a55ada7ac92ac65f6b22590f025","sha1":"acf410fc9cb903fef14f9aee4a3a2d15adc9e78b","sha256":"46eac1cfedec24c0e4ba9fa3588ef16bfffa2470e92c3b713d90afa6ef627547","sha512":"f996c043416e18733e0b89cd17e8166249ef7f1359ac290128716df1c36604748ad1afd9879c31745a42ef16965b06841ffb5e5faea1d7c53e33c8cf06cad3b9","ssdeep":"96:TMh5scacYymwLF+PKcihH6DPybh2DLFlOz3lv7d3UoGCp+Xb0JRpLr7K3tG4fmlo:oh5scacnkP7NDPy1pUr06G4s89iQeQ","tlshash":"8d02d6ce3779a3f4f805f3fa9f0360957a0a64fa7a914670c3505e0974564aecc89ce2","first_seen":"2025-06-29T11:27:29.831205Z","last_seen":"2026-08-13T18:19:58.022394Z","times_seen":27,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/rewards/ranks/platinum.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.203Z","timestamp":1786645097203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/rewards/ranks/platinum.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 752\r\ndate: Wed, 12 Aug 2026 16:20:57 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:57 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"565dd1734d1d8382bd96868e72a7a1a8\"\r\nx-cpu-on-cache-miss: 186\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: e2e83db9-dc58-45a8-aef1-acd802f8768e\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: wfw_I-ZhNlh0cZqWDnEWSdLgyaoddtyyEXfNQEGZR_-U5OTW_aEvvg==\r\nage: 93440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1605,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"565dd1734d1d8382bd96868e72a7a1a8","sha1":"1697c14d48e4e90580c843d49e0dc6044efba525","sha256":"c5ba33f7cc76dff77f8339599487b388ba5fc64faac290762640c41e94b9464c","sha512":"12d1995921f06bd4d480306ece8ea6678895aeb85d6070d805b6956ffefed42f9a91499fde92d63a7016ed5e0ffa6212e74c0ce621600258df55f7f174e13115","ssdeep":"","tlshash":"c1012089b4ba0059cf0c5570a829a91a83ae26d736d06152fa1199e60a9f6217364fc6","first_seen":"2026-06-14T08:39:52.586485Z","last_seen":"2026-08-13T18:19:58.023388Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/fonts/890de452eac592c6.woff2","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.646Z","timestamp":1786645097646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/fonts/890de452eac592c6.woff2 HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/assets/fonts/roboto.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-a880\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E67kbq7A%2F%2By6T86oocc8PRZOHoPBFSlsWhbeXMSqfq23Y9UswR1EmSqrTuRAMfc87HTB0BvPf%2B%2F%2BNFphf8yJAZl8nm04P%2F2v1HbSvyibxHFgWQwxfw3gdaiGpjatZ63dimTmNSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b44a7f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43136,"size_decoded":43848,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-13T21:52:08.733406Z","times_seen":261427,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c694c779e78f9bfb.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.829Z","timestamp":1786645096829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c694c779e78f9bfb.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1383\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usogmnf3BMb0FfWl7T8RbynLFerNe1ytk75oCe3X%2BcEpqr%2FAH2Ub6m6cfRMIA60YRWEYLIDoL1zaXcPxgHOy3sk6NTh4xhvE5zlPLsgIgDYeCfDwt3Cj%2BootzfjTIEd%2B%2FksfI%2FA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4995,"size_decoded":2590,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5728058007299cc4af37ebaa0f2ffb81","sha1":"3b15e9b903d422f47fbd9ac6334202a4f6f988df","sha256":"48541fc658dd6500849d72407e0df99bd39883540771f8d0def08d221b71257b","sha512":"8118c4fdff46bd923d8a3a9187a9f8e146975375c3f0b4ec3f1661b52d66d98d04bf60b2b129bb848ebce9790000ba976178c131c5670d37f4fe4083b3e5f697","ssdeep":"96:3ea2UiHVrPta2s8a22NDQK9/TP/K5RDAHkuaB/Hlbo8BpUcV4/+xKN:3eU6VTts82NsK9/TxH7aBvpoMuY49","tlshash":"f0a1d8fce3947280d6447fa4db2220b2ba4e2bf29ee9d114518dbd9975440cd5e78dcc","first_seen":"2026-06-28T09:35:24.230267Z","last_seen":"2026-08-13T18:19:58.025615Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4b915572fbb83e81.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.852Z","timestamp":1786645096852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4b915572fbb83e81.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-865\"\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPofce4zIKoj6koSzjdfxkyYqs8R30FUwxXPsCmn6M3RnQtCFXH50gSlciRMBBlAYs55nWojbLKIu7Lxz9gVcLWMKRl%2FcuMF%2Bgz8YUrJZiftIOhnxLOCnjyaGExJ6p83rXjwWLw%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af49ee7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":1819,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a524174a0b84b88ba43b0b556abeade6","sha1":"6b2b745ff55586416cfe5ca7602a207a5fb7bceb","sha256":"7ed2712a9b957d90910dc8a8ad22ae45102ccf585d8b217ffcf9e18845d56e92","sha512":"a2c4105665f53dc8e5a52bdbd8f78904c6b28f7df20a73b9c3b6c8bd11acb2004d807862f169311feea6fc051961bee3d818577b891dc77621c601077e2c644c","ssdeep":"","tlshash":"5b4194b4232923fcf20857b9953cd5d83f0a38f63250c894cbb08d20946247c8da58db","first_seen":"2026-07-14T06:13:23.682446Z","last_seen":"2026-08-13T18:19:58.026573Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/85b200c0b2a05468.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.215Z","timestamp":1786645097215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/85b200c0b2a05468.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-b23a\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JofNgKz1cYHSm1rHgjgQ86EhbruB9OnxQPl%2F8%2Boz1mTKZC2rpgpWFbs1OQptTLhnRYe5xcz2TXuc5xVLAWImzmP5qpInBFQcUh1g1%2FBhRTUll8y1p7uFXSSMdWvJQL94ozrb2N8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b19a367131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45626,"size_decoded":46328,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c717e183a80cce233cd1d80f7653d62d","sha1":"bad677b65a8bdad55b9792862f81466447d94d7a","sha256":"7102815898f33034be02d591c9f77a4c897baea597d70b7720b75cd3fd062be0","sha512":"cdd7a86d33e90c77b69325bc26d53f853b70945d67b319a19e6e2dae6fe1fc99b922ef932c91abdd48c8e9324c6d22db457dbc33dcfdf63278b76f84d7184a45","ssdeep":"768:cT3poI2xklOMm9BQqqVgEr8GA6/Q4EGATAirYp6LIzIKLsEjasdiy7MhIAmYqo8R:K3payyta8+tEGATAirWhAsdi/hIA9tKT","tlshash":"0323f168af39aeb6b9dd8ea001428111727cef9b6f8d6f0e571708511f0351a70db649","first_seen":"2026-08-12T01:19:43.34273Z","last_seen":"2026-08-13T18:19:58.027459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/0af6d6f64c599874.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.235Z","timestamp":1786645097235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/0af6d6f64c599874.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-40bd8\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVNRmv1iVqauwsVjpK3cFytQVV2RPqS%2BZdrYNYJbj2dcSxNgpeIySlXSeCuge2WD1hRL%2BXHIReAEob6tjA4VnHTp6A6dW1piE6XAFeP4cOb7ETOkWYGJI%2B0u0KgJERTONZb0P0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ba3d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 265176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265176,"size_decoded":265880,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"5fa86212c0701320fd5124a7fd640a95","sha1":"43002689f24273b720d3662daaf96170f3bd36d7","sha256":"a4c35ee697ae596c66c8a91c4eef8e07bc5044a9c9b000ff88fa635b1ebd7a18","sha512":"886b3a149b3f1936ebb76afb311a85a735af3f4ebf7955fc8f11848a011d39f5bc1329231ca63cc223c21cf05aedd4ac4a2e2cd454f2d2e3f8f5fae07c881af7","ssdeep":"3072:tjHvbTiXUskFxEtzuuCUbtGYi9pYEZFKsmetfdZOP+b5WPUjKSGx7oQTkyKulASd:tLvnvYi15jtD8+4Pcq1NAxuggHNbZYt0","tlshash":"c844225ecf5e30168daff006632a59e44b856a2769434e8c78f01bfb533dd3a60c6b64","first_seen":"2026-08-12T01:19:43.286245Z","last_seen":"2026-08-13T18:19:58.028351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b4248c433f6aaeb0.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.785Z","timestamp":1786645096785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b4248c433f6aaeb0.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1e25\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrL9v9JH%2B97qRFNdoXM00SbglUcRcLqHwxWOMCj%2Fm8aqWi2l1bsYKQ9%2FOyckrHos5NuihpVGkklwY0FkRP5LRLnnw5i09YbaZhXKTBH0FQzXPH7T451IRo59ewSAgMnWY%2Fsi6sA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7717,"size_decoded":3933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b822ede2862b781d40222101e644bcf","sha1":"2a740ee454c79a5c64f43063618fb4be26e41d0b","sha256":"04b48e1b34befc41b8060d8e875e81cea6aede0cede87f1bbf3598bd867a7e6d","sha512":"944c03b808bd48ba002766f08cb7579e618f80b360990387e22b89afffa77b4de2301023f1ba4a761fc4fb00b3fcff7fbd86238ade246604ce11e4767fefaf73","ssdeep":"192:OExskBYY7azmh+XWyrgkuFkgb1+yRjZ6WTlYwQj6A:OEpB5A4Fk6+yRjsqrQjx","tlshash":"e1f1c5c83bbda3f09000f7e98f8654767a5710f9be469a51c398bd8ab88041d9de8cc5","first_seen":"2025-04-30T09:04:53.169422Z","last_seen":"2026-08-13T20:36:53.68211Z","times_seen":217,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/903c13bd392787c4.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.207Z","timestamp":1786645097207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/903c13bd392787c4.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-a164\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2fPpa452n4fTPdXQOSSt0XU%2Ba30WvZNeS5L%2FUzrHos6t6TqPC43t3Hp0BzZrKl2%2BzTAWDvJ54yWcNDGsgL0I%2F07xbME%2BN1ArkMnG9ZX3YEBT0kU6SfM4EDR%2BbkhiseE%2Fd9NliQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a2d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41316,"size_decoded":42026,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7dda9e40832eb3f38c8aeaa845a5077e","sha1":"e6e7454773695f33ddf4ed6fbbc3cae2b9651206","sha256":"c2409a751c75e8250f984fa37d87bcaac9f01f62821f383a6b84f4931e18add4","sha512":"92d186d85c563a0b6c12c52bba60617dc88d92e9a538f01a778039173260e9508e268eda283feaccfe96bf8655a697bde7cc0b9f6772fd5d77ca3bcefc480d47","ssdeep":"768:QJj8wR05DK2iqh2HbkcIHs845cXG0QBBSW16hOalzOCkO2CsWlbgwopJvd:T8kDTTh2HIRHCc29B4W10OaJO3IDord","tlshash":"c203f1981612a8eb54f126bf1365683466e6b0d933caf4a3e418b2b303c7298d477c89","first_seen":"2026-08-12T01:19:43.336456Z","last_seen":"2026-08-13T18:19:58.030269Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2a63d8ae08703875.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.862Z","timestamp":1786645096862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2a63d8ae08703875.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-13ce\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUOaZk6p4NMyxk365JLmknPk5mkLFZYupvXOUajwJC8xjDgK17Q%2BpPIjFUCAohZQ1AbM27IYQvq7OL8Gt5iGQV6gGk81DafSMF43dgNPYnvqf3I1KLwjQ0s2ENjTFJA33phovUw%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69f57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5070,"size_decoded":2917,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2a637c273c90d610459e07004eca974","sha1":"eb4696d0d270c01a19e29b457f86c19f958a8de7","sha256":"db2548cfb8757c9c31b21db9a930b91bbb97cd2977abd9a14d0bec230894be5b","sha512":"97586ff8d8997aafe05ba33457fc2196d570ed419e2871891dfe94f4ae27f599bb5494f6672a22436d114ee56c2572198655694793eb1ce05061ff0f585ea839","ssdeep":"96:C2tK46jaJBpDtvZ/zNCRO/KNDInUXh53Lf9XbvYlYu4oyb:C2t3FtZ/ZCRC0UUhv7Bf","tlshash":"bca197fc3a6cc3f8e846b2fbaf1656d1bd1744e4b7c85a35d390ae09740a4664c852e4","first_seen":"2026-06-12T20:36:39.890516Z","last_seen":"2026-08-13T20:36:53.557888Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/715a20ad212195bc.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.224Z","timestamp":1786645097224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/715a20ad212195bc.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-36ad1\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEpKiZC38leeEBK6%2FPdJ4YgS20MKApAU%2Fq6UAiuhMqw5sA5btgGV4bAROoiY9tBNTxYcKkC8vVVR%2Fs%2Fd5DnFcCs2yVlXaejJO60Bye5xWEa7eY28PI48Kc67eWZLfCMVVda%2BCew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1aa3a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 223953\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223953,"size_decoded":224661,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"0454e33486aad5f1d4578884083bc863","sha1":"fdbd1b48a959df5001b47e35dca62a27bc1ccb3d","sha256":"f0c06de7d092f6a24f383fb9427c4ed90c474fd6ef7b5579f52ab6c755e0c21b","sha512":"9191ea23abd367f54f54864e43bcc820b7dc690a8aaecd498a9b2951feeff20d3255b16d8c1daeae1010414297a0c5caa2a49d047a6d8a6a5515bf755b2ca163","ssdeep":"6144:I2GJ5IblRoDWgtZPamwyXVsMZEq+snF39+0Kqd:IxAo5tZPanyl1+q+snF3cBqd","tlshash":"3d242368b5abc5f6f4b7b7b445b2a8a5434fa638ec275a717220a474c7b0dc01163f0b","first_seen":"2026-08-12T01:19:43.28518Z","last_seen":"2026-08-13T18:19:58.032044Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b944d6e7c5b6d995.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.605Z","timestamp":1786645097605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b944d6e7c5b6d995.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3baa6\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0QOM5m5MW%2BvrJQL%2BoiqtuixOaDI7YGG%2FoG6nmU%2Bf7liPc7SDbKXk%2FxJCdiyDFpF6ENreFnxJKxwgSyl0Pf8yQv7ndQTvccdzHXj%2BTYNOgsx%2FqUF100Ccb3ZLnWrEBELLMpzJ%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b40a7c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 244390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244390,"size_decoded":245104,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"3bc586998233e127bc811fccb1b568e5","sha1":"a18f0f05ede67db8c61c1b7544503e37bd12d112","sha256":"e7e53e8ea197904c7fde5ef433f055725ebca04440199c95195496d4e74c17ba","sha512":"c4587e54e7f660aa01c60de4cecb5d9666c9611c5fd02463b91b3f73727fa08b2ed52901ec4e995682cc251c12d7efa8d0be9619dea6d1fbd0ec60030850daab","ssdeep":"6144:lE5V701xyCd7Y7m7dZ+3UhG73HYNlB6wxmzg7:kW1D7e3UooNv6wX7","tlshash":"013423dcd04e6247f336f46a5697a21f8db70b731392054b1a29433b19bcea9f4349a3","first_seen":"2026-08-12T01:19:43.305209Z","last_seen":"2026-08-13T18:19:58.034803Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.649Z","timestamp":1786645097649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-winner.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519068\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-13T21:46:43.785015Z","times_seen":549097,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c007dd219de53a7f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.786Z","timestamp":1786645096786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c007dd219de53a7f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-22fd\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh31NEWdzRFcbPl09seDKse6Lt239uOJhHHuPtQvd9KSwMf3g1muA03Sd0rpQgkqRWyqMzXJhJ7xyRFmzQDG6JL%2FGXe7WwONON3NHx7yApd6LbUar1CUZFVRkB6UZ5Z7RW04fKE%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8957,"size_decoded":4478,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b3c81da10a12f459c97496592d34f4a","sha1":"44406f03714c5e77a45aa82b296be9ef1bab88c0","sha256":"2170c0b421a69fa223f6160f0a8a5c72257c7a0e4b5611e7cd635ce3721c205d","sha512":"d0550d78da61b92fec4e730a77f75134b9614390270ad637a7e9c8795f3cb61ef2cee5b58ba43874ad61aa58cec3f91394274bf6e761d5d347ff0b96575ab86b","ssdeep":"192:mqz/SsDLsX0J3M96Cgl7n4KR8DUg/phIq1ZjkKnyvP51wG/uxGRqXVz:Ss8X0u6hl77pgDIq1Zbyv3uxL","tlshash":"2b0285dc637a92f8f801a3fd871794a579427cfb39418929c3a40d1978450ac9ec9deb","first_seen":"2025-04-10T04:11:56.94119Z","last_seen":"2026-08-13T18:19:58.039003Z","times_seen":332,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/67b5d23baaf83811.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.790Z","timestamp":1786645096790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/67b5d23baaf83811.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3c3d\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VhAB9Av1oUzZLpL7%2BOrlQ%2BCIU7YjO2L7dO%2FV%2FcgfpkQairGe3YYd3wFWsyZSj12CJbtftTCpRkeqpVCf5MBZBLsKL%2FTP3UTeD4MHeoaVNHScMkeJIC8VK%2Bhwa7WigZJTnEzqdLM%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15421,"size_decoded":6985,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ad83e4e96b05b921a00f285cfa1ff9e","sha1":"ffaef38d0771c091eb364df50b82d6e6f69dabb9","sha256":"eb3ef442a5b5ef0707c6503f98b9050cb351ae793b098e2dbf2bd605a2928682","sha512":"ca989c8af156d92f6b95f969573678f8844923f6394301536e2f8bf9f8c8514efd596a7ba79ed44b6d6386fcb7c6dd3884aff4af98bcd93018dae6b8a1256eaf","ssdeep":"192:EixbyGvX2zMXOSOex300GkXj0Xq39vLocglomwW1AnytsFAg76mv66QDbyR8fTJ:rU0OexE0Hj06NkdomvAytqlWRbyA","tlshash":"ae62a6cd3b358fb8f481f1feca0384a4794598e6794395a5c3d06e1fb4424a48e5aceb","first_seen":"2024-09-11T15:26:51Z","last_seen":"2026-08-13T20:36:53.596137Z","times_seen":345,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/734e279726998277.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.202Z","timestamp":1786645097202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/734e279726998277.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-37924\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLKAHYZgasmVX9gUHSob0TlZ9edSxqlTpaYXOt0Yqw%2BGUrFFTbWs3E7G6WsATIymtWlx30UupFl9vrfbZOSoBCYhvKWQQzdwBiKesQduu7UUeYsfZkV%2FKPvuP3ZPGCj5hRsG9ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a2c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 227620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227620,"size_decoded":228322,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"52f27f14c990af98ce46ec5a8fc2a74c","sha1":"603165aec7a6bcd641b6ea989ef61116a2c0c1ca","sha256":"67dad3f966bf18e80523d3fab0c8482032d6c42120b5ed2f07b64da2b548233a","sha512":"fde5ddf4a72161310ed5e9183085c830bf023e799bbc5196ac397120fcde44ad44605fee1bda28cc085ef52ac2e5e356ee34048ec566ee2ffc365aea846ee9f8","ssdeep":"3072:3b5lQCRda0BknaxNkUFUo3EivCPKIRC1yUIJzloB+Uy9cn3RSolZcNLT44K8bZmB:rQUpKnRUn3Hv/ECMUBBB1ZY3bZmmP1o","tlshash":"7024239072c2a913efb700fab4135e5d6808c746e56688077973587c3eeca7eda724e0","first_seen":"2026-08-12T01:19:43.294908Z","last_seen":"2026-08-13T18:19:58.042276Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/0826b0adb5d08f64.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.266Z","timestamp":1786645097266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/0826b0adb5d08f64.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-11484\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jTSgidxhV7RjwWRy9hX3cl41RYmg75sa0f16d6zMFAi9UNF8TWla8npMpToSUrDRycoUWRW%2FEW71aPa03YheBti1u7xAqNXddn3gzJWBFKpK4xzlsf%2FtcpMU0f5%2Fo4ghT%2BecxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ea4f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70788,"size_decoded":71493,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"629ae4b2a768c3812d8ea7134ae563e0","sha1":"d1d7f3f9103c2578dda60994632f70620e6eb29d","sha256":"a90a16baf2147ef87852e19cfaa0134cb0342583d14275e62841eabb5e10b6d5","sha512":"249b2068bd47e682488655c057d95af0ce28023c5b4ec341dff58f392e10b8d0cbace0fb6303c1e489f01becb831c5e13df0e4b3ef90e555b1545ae767274a44","ssdeep":"1536:u3GiUaooP39tYzo7HnMNvxlADMmP3uX5a4Pww1vguJ6IK4GCM:u5oov4zobn2zADMmfurNSG6pr","tlshash":"876312ee52879be38aa8a87f615e741dcd0294c4f74158518cf4e2c7548298cc34b6ff","first_seen":"2026-08-12T01:19:43.33169Z","last_seen":"2026-08-13T18:19:58.043703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2f4187ec58a4dc89.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.601Z","timestamp":1786645097601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2f4187ec58a4dc89.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-4064f\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50pP%2FxBfD2Og%2FyrUWj0ggCy2HJ2t40Q6sQtYhpCNO3Z5cVVwKyRLubBFn9OiaP5udkySC4IEVw%2F2iRQxXmCzdyhs8f%2FoUiXbh%2F8xKJDc5xixyVjsrfFaOm%2FBOPDXr%2BvnN%2FZFMpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b40a797131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 263759\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263759,"size_decoded":264473,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"bc46b78e49b8e08fa1de57fdc2bb0940","sha1":"4aaa8965c62b970c7ffaa8662406e8a4dd06a8f6","sha256":"ef2e52085512d6f026bdcbf7f441a5555af1e2e84ca6ee0ca31bef74e071ee24","sha512":"615a125341bfc5ff434730fc71b8a9453e21a13ab2033dae9e3161abdc28e649ebadbcf94f5bb4d636c8ff450a113a28ec00e3cdfa1e72eb22d8a556ab6613c8","ssdeep":"6144:Po50RsGxAkoMlmkJVhep5t8+JcFUCqxgtbk0QTrlyup9OMQ:pjxA8xJVMpr8LUxuV1JarQ","tlshash":"5144235956abc9d62f3d105425f0cb6ea94d382c2126b175b72b8a280df469cec24ef3","first_seen":"2026-08-12T01:19:43.354605Z","last_seen":"2026-08-13T18:19:58.045Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/brand.css","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.769Z","timestamp":1786645096769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/brand.css HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: text/css\r\netag: W/\"6a7969b1-37fa\"\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jb9d%2BeSVRul48TJYOgCzlo3iIWLCgWJW15j9%2FQmnymGh81N5%2FCTIwppLBC4rdP6Rg9UkgN8rqAgtlbDAwfTePMmt4qBVJgpR06Tk8ansf0UYU4vNQ2RY63YivEapmOQkWH7olL0%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aec9bb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14330,"size_decoded":4144,"mime_type":"text/css","magic":"ASCII text, with very long lines (14330), with no line terminators","md5":"b8cc3c5f73a1e109ab748f83cbc24045","sha1":"442719e1e34275a3d28b0eb72f3b1636984fb5ee","sha256":"73047d3502524ee91e6814401ac0d276fd0faf90b41ed861794a91d5777d8aa5","sha512":"8e8acda4b80ab627930cc1e3de83e00d9f0e0d80f7c60fe3345e96637dd8db3f12ba502061c3e4a0981cfc18bb96551bee4683b593c6b49076b9fb4f717a9caf","ssdeep":"384:Q8ZtEFr5EdwGYDFjchXgvajwruk2c1EGrt+q87Z0dFwUh6rx3lSXia0pGid2UoJl:ud2Wwr6nJid2UoJmezWyDaSVLm5fxz2","tlshash":"5d52a7b2b140302df42f4918b994566f7524c1329b53c6beef97b728cad70eb3e60609","first_seen":"2026-08-12T01:19:43.281986Z","last_seen":"2026-08-13T18:19:58.048394Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/7f675107b3e4b87c.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.832Z","timestamp":1786645096832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/7f675107b3e4b87c.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-329f\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTBezuk7eQhQfJpPcMcQjjZ0iqhMyi4jeeWzPlVqnWB0n6FYnLFtO0SAkkjHSaIts72TxGZcP3KgTI2nBF4VfoSly3gdHE%2BjbjBFTMAjd4%2Basm%2BStv2MkSm9deE7IGDkx2e8zyo%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12959,"size_decoded":6403,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e01edb26c80eee54404984d4fb51ed5a","sha1":"1921e9d2fcf7b53886326a1d93306d3d36b154aa","sha256":"2a14eac785b6cdc86e38c9858deb34a0665faee22142b6e27b8ac39b84433e04","sha512":"584df59a80d679110a7ef46fd5d0138b10bd3b1eafc1e05502a6d0178131a68ee603b9989640c6d35dc31aab9a38932ba89f1a532cfedbc95580cd02ca28a5db","ssdeep":"192:EZulrZP6+Fw5YZKdjxh0xmpjjvDqAqtaZqEtq5X6ZrMH2fiLeG8gbCso3:EZuT25fdXVpHv2AbI5vH+kVbY3","tlshash":"2842e9ec377583f4fc85f3faaa12207a7d0664fa6ac1c6b4c3952d05a98206dcc81dd2","first_seen":"2026-07-14T06:13:23.632451Z","last_seen":"2026-08-13T18:19:58.05121Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/aadda3b978a38e0f.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.309Z","timestamp":1786645097309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/aadda3b978a38e0f.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-138fe\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=io%2BS7cbXMjlS%2BIG5CBPl1Zf5caNRY7OVTq4RSoasW7Ae%2FkdKSsr4x7yxTuOnfmv%2BO9cQfNbYFEo6udeiTBVezBrGwEG%2FnBRheEPkWc9bKeZIBLcbhmbXGH3Sq0k2qUcXSBlckgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b23a577131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80126,"size_decoded":80833,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"f7c14cd7ff010563442b71a9a63de57e","sha1":"c6401da221090025cdd8b5cfa422a3ffc349af59","sha256":"a00c8874691ddf564c49e74d6f838c817e43561568cffae7ecc83735e938c140","sha512":"db1fb4c71b60a06da37c7d64dbb38d56d26ddecdec3d8e88e1483cc53dc2efa15041114f073e33b96607ab7dad24c5020f7c196451d4773c1903d4e25bed5f10","ssdeep":"1536:bYS70ll3OFfoNdrNNKfhXrsln6/+wJbx443Ie8SvaA4tEWuFV:blglleFfOVNNKZXqn6WwxaPWvaA4t7m","tlshash":"f87312ae4284270fdcdf593b080c865a13a24c117a5a4ecbe63d68ec7ec143684f7e67","first_seen":"2026-08-12T01:19:43.280962Z","last_seen":"2026-08-13T18:19:58.052431Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c730b7c50a370291.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.823Z","timestamp":1786645096823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c730b7c50a370291.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-22c4\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuLCfIzVjlIBk2c%2FSbD0ijcghUvDgCuYxLRPSNFOrR8M3E7R0rQ%2FRbDfy54z9hDk%2FUlMK9dzMveUAyap1SHjKlubdkkxJ1ZTdxBgd1josU62mOFJ3foWMvm4Jcc7r7x4SAIJjF4%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8900,"size_decoded":4704,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d83f646f2a56298710a935362bb80a9f","sha1":"ce36b9878ce33755794289637d0a331060accbcc","sha256":"cf791ec2f9c1df78e52e3eb4950c5976cd26992c2f14e2b4d2802f46d2bf6c57","sha512":"022ef17abf1bc1be50da4a9ea8b9d17980afce2b59fcefe3c373677646c096c839007f57f19c4dfb03b828ab6c1a39c90b2764f490360b30720108f2043d0120","ssdeep":"192:wHgguIigju/umjKhyZtuU77WCWH9Yv6KhdlfdEZpzq4ueY2s//pGFA8X4:wHTxTu/umjKgZNOCW7s7uTzP3pA8X4","tlshash":"630282c427b893f8f001f3fd8626d8717f6639e5a64ac974c3b65c25e04504c6a69ceb","first_seen":"2025-04-12T01:50:31.267562Z","last_seen":"2026-08-13T18:19:58.053383Z","times_seen":77,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f1eae0cd534115dd.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.873Z","timestamp":1786645096873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f1eae0cd534115dd.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1712\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcKtTXApljgd3SeIi7AjgkERpKtMFnhUiso4DMZWV4%2F9N0k1xJ%2F2IrLTLffuGUQXyFYFbOuWojcb26NJlmXvtU8Cx7oVWscVt21PoOU%2BovxSrGiUxT0HOCsPxxQbkQHT%2BWIpFsY%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af79fb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":3261,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b278391a884cda718d206a7e8cb5f51","sha1":"561010cd349c9870febf44975875b95a8dbc005a","sha256":"ba1473d8f5b5ac42724035518f028da294a2003eb8a33371867be21266a24bdf","sha512":"a4235d30da377240036c6ab5f11fff4ca80977a437db464f18b791225b39578432a88f5c61478add46b7dbd4f07a5156c191ef9711915bb8e8af0571335ea2b8","ssdeep":"96:4jmX2mIi20fohXMtpNS1Z7xIT5veHkAFK+EFaEoxKRmWW97EFGp5H:4jmX2mEhKrexIVe+FaEWyW97EFGp5H","tlshash":"12c195e423a5a3f4f90af3ed8a363599ff1d38e8b344c055c3502d45a5830b99dac9e6","first_seen":"2025-04-13T16:20:09.205461Z","last_seen":"2026-08-13T20:36:53.714606Z","times_seen":228,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/icons/vip-trophy.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.157Z","timestamp":1786645097157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/icons/vip-trophy.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 740\r\ndate: Wed, 12 Aug 2026 16:20:59 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:59 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"7b29cb830c4e2bc833372f0d2f9f4ad4\"\r\nx-cpu-on-cache-miss: 188\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: 86100c28-c3a8-4b4d-9aed-a70550140b09\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Q9YPZv5f5fppZsdmYR1HZF22EO3oir_4L9ZcCdI7RS6wqemrL7ru2A==\r\nage: 93438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":1593,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b29cb830c4e2bc833372f0d2f9f4ad4","sha1":"30348b157052fcb398a45ce801e9d3ade4a7413d","sha256":"7abebc556a48f2862b78fef7e218e3ef078813c88259d98cacf2b190989729b6","sha512":"db01e80371a6f01aa67323aa5ca54fa01c3735bafbac1dcef7fd62357dcc9996177370a218115846157aa533bf58389f0ce025b9dc21b5b42551481c445204c5","ssdeep":"","tlshash":"390165db3358e228fe24075771ab6f04122b954433e8c53469cc283f765d1271f47590","first_seen":"2026-04-29T08:38:26.985575Z","last_seen":"2026-08-13T18:19:58.057822Z","times_seen":34,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":23,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/41c4c2c7eea9d81e.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.188Z","timestamp":1786645097188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/41c4c2c7eea9d81e.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-32aa5\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yu7%2FCkja1BPd7CGgi3tFbroHImpvB4wkkJXiVTTY%2FhwI4fnBXJWpmYBIgJRKxj650kA38lHAGsbE0BgQelcB1fWUQqQ%2BWSNPnx47cHHEFsy1yRBiDF%2BdcLiKtBvuR%2F6VTPliiNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b16a207131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 207525\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207525,"size_decoded":208233,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"ae9174ba2b52c31393db6e9d8a9530b6","sha1":"1c239869dbaa9678dc710d090a351feed71f376f","sha256":"417dfbbc1547f1d82603500dcc0c6289a81c092302f70704c136080cb0807dd2","sha512":"f26bfffd3ad1f861dd7436acdec6e6da50fdfb6f38231ccf4a91241b10d278814a6dce663a7af79e421f183839bbd450ef83dd0402f2222a6dd9b47f7156fb2e","ssdeep":"6144:zaHL3umlfMVMwFVYun+1vGaaxxMvD4WSZ:63uml0VMoGo+1oxwhSZ","tlshash":"641423ad907084fa894f110b033f5ec4eacc3d5d6186aa33711b8f5f3a6f676689458b","first_seen":"2026-08-12T01:19:43.274724Z","last_seen":"2026-08-13T18:19:58.059514Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/34c18947991a92bb.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.205Z","timestamp":1786645097205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/34c18947991a92bb.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3fdef\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gF%2Fk%2BdFHIVDwBEKbjcy%2FcKvcbMMm4g25UdWsKoeIjgZyVl6BIB9rzmuQD%2FiVpxIKYk2miN%2FXit%2BdFrcBi2ZfHvxRNVPOdfVtIj5mgX95kV7pPImcfPbUQz3SKGnaDrLJzA1nA9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a2e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 261615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261615,"size_decoded":262325,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"aa4f99416e11acfc74f17e39fe3d40ab","sha1":"75c771fedf8a5c8722ff5ac0082454b21706addd","sha256":"978085617cddcb05873011263151e59136645993c6f68ad78e3a91b371c5a4a9","sha512":"5056ce3c1ccc7aca2e1a69d5d27a9759058250f7d8c40388436ad6e79e101f53c9a051cda0f8b408e75a7eec81ff4e67633a6ef2889d95db068cc41a828548b3","ssdeep":"6144:fv+8MajYDDTZMLbnDUMY8PGc33Ortt/IKjAgK:fmxajYlMPDUMNGc+rtt/JLK","tlshash":"1e4422fa63e4fc8a860c892968ed76738466f889a3d2de50f5a025d5701d0d31d3cfe5","first_seen":"2026-08-12T01:19:43.384959Z","last_seen":"2026-08-13T18:19:58.060681Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/215ea6bf0bc79b21.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.208Z","timestamp":1786645097208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/215ea6bf0bc79b21.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-79f2\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mUbFPlqs3R%2F6OmbPSU%2FRak9NAIUhYlPb6ipBbvQJtHG0VYbT4Ww1WdcaiTK5HBirxbwX%2FG%2FdD%2BoSfcfTVDlookZs%2BX0GUrw4j%2FNCkC6A6H5ghfa8nz9ABj8ABVqgNwnzldh9nE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a307131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31218,"size_decoded":31928,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"133e1967229546d6261ef335c18b014f","sha1":"41ad116877d3dd9eb77f3828f3a847ba24e38a3b","sha256":"bfaa055c5d9b9a1d09e53eef67226eebe8a044f4488c2ff6fe5e951f13259013","sha512":"5cbda431c98620d98abae08fb5e51c14729f6e6e23491dd20406797e9e3bb1d7fdc73209804bf20f5e9c8c125bf1b7ff4d745df8ee2630ce5f5d6ce8ff3296c4","ssdeep":"768:wv4yv+gz0jU9dwSGRefB6l3m3SEioP1AiFrwRIz93KdZoWPcV:wv4+0Q9dhfum38yFDw/oW8","tlshash":"5fe2f1a163080247826e374d72e1e7e1bc3631af4af9179ae30f548f5a2f5505b3431e","first_seen":"2026-08-12T01:19:43.359132Z","last_seen":"2026-08-13T18:19:58.061933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/a711416c31d42723.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.590Z","timestamp":1786645097590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/a711416c31d42723.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-892e\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFEK%2BYPz%2BahMFFbt2lTf62VVKfkkgdPRTP6rSWZ5Qkt8yquY3uADehX3c%2B9Dx7D6C8p3QOmjx4%2BC0XyCa0e6%2F3Ba0Jo2IDjc0%2F9mZ6tRXxMXTUCaaofqMZq3xIS%2FeW8JiYmNlrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3ea6f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35118,"size_decoded":35828,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bbe89242fcae26a5201620f7c539d98b","sha1":"d9fd61b600c112556c8cda1cbc85b8453b44d141","sha256":"5f949eb8e37836726c31b1c9c411f92349b3f19ebb20a4891f23ae1f6fa1f562","sha512":"7c949920ffb1fd3dbddda967e617a3821e099c61f06f9b4a7daf3d43c1983db558c3139c763d3ef130cf730e5f26715e10012dbcf6e741c966526c17b80dc1fa","ssdeep":"768:FZ50zMA93eU7+MFC6gU7H6hgbL8s3Sr002yIO0:L5V+iITb4e8s3SoRt","tlshash":"7cf20251b748f88811cdd932b7b693320aa1bc8bde933b04013f9e6415770a8fd9adc5","first_seen":"2026-08-12T01:19:43.3473Z","last_seen":"2026-08-13T18:19:58.062929Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/7a468c568a1a6df5.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.594Z","timestamp":1786645097594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/7a468c568a1a6df5.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-9806\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWZStFzWzFnm8w9G5Ixir3NDSTkO9mNx4cTyBwjz5cYWllJNZkoRuQJTyX2ASVj3DnGP%2BmuR3qjikfh52SsuqdaCejn%2Fwz8fcvNZtHHRWv%2F%2FFdPGCMluI9JV5ppu1XTgCT9ckZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa727131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38918\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38918,"size_decoded":39622,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fe1e14b3f789dcb95da59f8a3c6437cf","sha1":"298a2cd63648ce3f037fca2195be2c1222aee29a","sha256":"1a57d75de1574a3e6cefa759a85e753d39a35f025e5b7ce6c955d350c31ea719","sha512":"cc1a787a14be1235603a2d6fa791e30a44aaeece114e62c83e80a28b301321f52e117b730b617b3b2b18e51bd6a9318bb7519aaa894dcb1febecb7b3ae623530","ssdeep":"768:vmDKxzRz1YFjvNlCtZ1yDLsvNzn+EcTwYaHDMnCigd+NJw+iNPxsuWouusKO:eKxdaNKD1yv+DcTTa6mANJAPqkC","tlshash":"670301d8a929608834f509576f1b9d4926097371bcf0c17de5a0ec5448f8c41dfde1bb","first_seen":"2026-08-12T01:19:43.316452Z","last_seen":"2026-08-13T18:19:58.064195Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/ca0bdb7ca5625cc8.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.212Z","timestamp":1786645097212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/ca0bdb7ca5625cc8.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-84b6\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIyDA%2FPY1m5J9JL1NsAy7q1uRYb5lPFx4oy%2BIh5lByYITWMc7PKF9GKswyglZ69HSMD7914HrfjPso%2BXvjNKfovrl3rQJtg6i5g5yuB0gloOQTMSQ0DDGuB4eKPDh7IhXBkrt84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b19a347131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33974,"size_decoded":34676,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e9b74e2df2ee4bb5ff9425c76cd3f983","sha1":"f594b93ce2d59ed3cb719af2d816a70d18351994","sha256":"b052cb881bfe97b8f5c3ae44657b0c3cdc9daf8e8680e46e75ebeb089f3b0bdf","sha512":"41e8b28db10e0bfe063fded96874e20051cc816003e72df32a93c1db403434ea91ab6437ce0d4ab4d1e44a6172847e133a8bf2e2c954ea1b9f084fa23d0a7494","ssdeep":"768:0MI0+RoN1m7roieDb7L/snjJ1lvnUazKic3NZ5ZFA:5I0goNQs/DbP/sjdnVzv4NZ2","tlshash":"aee2e1b5db35e0edc5cd6e255420aa7ad8ef68601bd397c4d8fe9157e800b31a833c89","first_seen":"2026-08-12T01:19:43.260876Z","last_seen":"2026-08-13T18:19:58.065377Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/57f3d50f6fee41a0.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.239Z","timestamp":1786645097239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/57f3d50f6fee41a0.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-2f639\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbshmSRyQLRZB4CF19DKCP5Os1FgO6KThGcJf%2Fy2FddGZAXiFcOa4m4KKiEHuSoE3XtA4bJyngaNstY3BE5oEHViGjdzFcSY39UvBchUoawYNTDTruZoXlkzRtkj9PPMLLJglcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ba3f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 194105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194105,"size_decoded":194805,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"202513d786296fb4f9399b7b336d0d20","sha1":"e1a4bedceb336147719d87adc08f86d971f49c7d","sha256":"a88b9f1b3f995d5a180b7ed5c2ec5d88929ab90b347cbd3a1f2660f80bf22880","sha512":"cc717345a623cf7b1766a9e9fef836af1533588a84219bc96a3d36d19d8e70cef92a0fddf00762e01374c71af0ef3ba2f3a1b9cc4e161a18435f606fe0ff3911","ssdeep":"3072:PVDMRmBfrTOpdXSmIvYelLQTATPUJnFIuvfjNo4L481QWsDgH7H/EgIFFZylsKfg:kmBTT4XSmIgelZbUB+CjNoiQLDgHLEg2","tlshash":"88141224ab2b4c22835fc55d17fa01f1c92396bb20ba5c6a6e31c851f4971b3e1f8d39","first_seen":"2026-08-12T01:19:43.326514Z","last_seen":"2026-08-13T18:19:58.066425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/cdf05fef11222a08.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.589Z","timestamp":1786645097589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/cdf05fef11222a08.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-1bfb8\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEOz%2FQrGUyxuJ3YN8DsAJw4PxaHSAfrVUpSYYJTLC9ZF8NazH9rV2cuvtVhz6WgwCahcrj5StiIKYeT4Ic8Cp1dEOExkIOk%2FgR6VnnmtXNiTkHrsciaxPe5tjNmgrxAWmYnja2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3ea6e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114616,"size_decoded":115318,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7055c5efad246e3c8429a6af83925a39","sha1":"1b69bf1f888dc005cf845aece16ca1bd54dbad96","sha256":"77b12202e827cd0682e346c1d78c2881a402bd8ef8db5e7426e343bc7523e0f3","sha512":"f00d710e496b3927026ed98cfa1c26d170f246e36a021cd4c973efff5e52aec9f6a50b43d3fd3100876200b6272f897eece19bf05dd31a737b92bb1629665cfa","ssdeep":"1536:OC1ZleXWGO52dvpNXF4RN3KzT3MFCJZxCih6bfpuh5IogCAE1N2UXlLjbIr0i4oU:f1ba9HvfAFg7UzebAE1X/kaogFtoHQn","tlshash":"5fb312c7053504f0b6eecbdb4753794832662ea647ab137f4f0ac9d80299dc7a2b444b","first_seen":"2026-08-12T01:19:43.261955Z","last_seen":"2026-08-13T18:19:58.067346Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/fonts/890de452eac592c6.woff2","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.640Z","timestamp":1786645097640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/fonts/890de452eac592c6.woff2 HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/assets/fonts/roboto.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-a880\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTByvlJdABnfCl%2F8GwhIuFo49MOiGfq7bWdonKnpOyN2Uol78gI63V2dVQ0fB%2FckKMfr8Up1Jf0QYq%2FVgXRKgCvWYq9AuKn%2BI4LHu1qLMi7XommWYUr5oSDcbdtqMBJjrfybWZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b43a7e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43136,"size_decoded":43844,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-13T21:52:08.733406Z","times_seen":261427,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/d2b012fc163f0846.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.803Z","timestamp":1786645096803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/d2b012fc163f0846.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-d67\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rO%2FtL0Hfj1eMMx2vA1AfmvMkat1CfpQqEYzE3dGCtcHDcYvyFO795Em6MbCqt9P5wIfg%2BQeGBMbtO957zI4HVaExRjEMvwLvZ0R%2BcTNn6eS1uS2RggbgVLFT%2BVaSaa%2BFlj5v9U%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af09d07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3431,"size_decoded":2003,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72f7c7832dce7c4047496f8fa9bbff85","sha1":"195a0eb65fa61a4ffc985cb0852f95a1baef449f","sha256":"aa6feee2527062f20d6939f368f9561b4261ef9cc5b105628903b42ef5a156e0","sha512":"daf845cbabaa5c920adb33dcbc22b9320f24efdd967173897b560f6e67b7fe604240ffa6d5c3cd8386ab556b18f5b5088ec69163627dc5c5b54b1011a6289256","ssdeep":"","tlshash":"5b6182c12768a9f0fa15a3fa1e1ae036621355f99ec4e111c734ac4a348542e4f6edc9","first_seen":"2025-06-29T11:27:29.865458Z","last_seen":"2026-08-13T18:19:58.071972Z","times_seen":73,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/2d6a8d836bc5169b.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.137Z","timestamp":1786645097137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/2d6a8d836bc5169b.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3c4b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiEYTEKIMjDo5ZAN8N%2FQsZYiHBDwfAZYLD%2Bj5wOb5jjcdo5o7J1%2FNuEGvhvpb5xdgsyQSy4W2038S4MWaKF7iaA3K4I5hKgB3vxt%2BgJK1LppBEpN76yVL8xWb8ffb%2F7nvgBQZtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b11a167131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15435\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15435,"size_decoded":16141,"mime_type":"image/png","magic":"PNG image data, 84 x 136, 8-bit/color RGBA, non-interlaced","md5":"079504017410fc9c51350f5b8a58e7a9","sha1":"810c29ff0028588c5ab4651b7ff8a042cbb5324e","sha256":"19b7ad04e48ce2914591cabd3effafb100666bb40ac515e771ea3c65bd96f4da","sha512":"7fd9cb678eefb885dc45bf5c66616cd353ac33088ced2abf0c3c0158e82d9854e179b0aaab30eea7a2781c04eeadbeb929bc6d8da4119e236d55813ba6c80f91","ssdeep":"192:PsQq33KfYBYAlWh68iu+W6z9SPml2QYTDrbFlOlGevygMclN5366sHXqHlI/N/td:UQXfY1OYzimroDfFTeNME8rnJvazu","tlshash":"7c62e184809620d7bed054325759d56b76f8a3329a48f74f01e7cc22135537cbd496bf","first_seen":"2026-08-12T01:19:43.329408Z","last_seen":"2026-08-13T18:19:58.072903Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/4c0509c84bcf0a13.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.249Z","timestamp":1786645097249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/4c0509c84bcf0a13.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-39adc\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdSQSzgAyJCZdVwgX4raQsFCxbaGfe%2FwRsyy%2BJT%2FsQADJ81AFKLOOJyChqoxaDuqSrMP8SbiLMVl7udbu0%2Bs2n%2FbUQIt8v%2BzlRJ%2BT3q%2F29AyzPKjo2xSVyhag1iYu65TkOuUXVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ca457131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 236252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236252,"size_decoded":236966,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"6e47672a7b8e3bccfa9203b98c5218ae","sha1":"83fbb4c8368a65a61415c765c80939c36a49bee8","sha256":"6bdc6c522dcc03653628c4c646f63c1f67e379519702934baec50e713c4f542a","sha512":"df2bddf8859bdcbe24ca9d6ba4d84b33fb4f290a4b7d0433bfb5435935e79d5790d815dad2dc6c05f8fa693f29f27362c0ccbae960d70796cfc275e573f31e46","ssdeep":"6144:2cqHvZU9PyIHTM2lt7Zc8QdyOXhYTmIokyPhNOcMCVywd7:2BHvZ4NHTMgt7Z+uTjXRcDywd","tlshash":"083423503fbadd072b091a212b6e1f86e741b5d14c23fb4f5c39238be6ca5986606d1f","first_seen":"2026-08-12T01:19:43.277237Z","last_seen":"2026-08-13T18:19:58.076343Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/21ab36c636db4ab0.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.774Z","timestamp":1786645096774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/21ab36c636db4ab0.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1633\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fU20vdgPtqR4rSOtWbo1BQMgYGUsnuqyja2vpnfmMefiEk9Tnpe8N98gwBUiL5sXw%2FzA240WfYNNj3UuW9UoAqPQNPz%2BlTghCk2Enr57WqJ76H8SFncNdKbYLxZvRuAZy7E24Jc%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aed9bc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5683,"size_decoded":3092,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b31b092f00c702489a618fb4fdd6174","sha1":"a3e2b10c43612c1f529609c363c88d431f990072","sha256":"47488ff50dbd386295032bbd372070c103a1c931a8a2390430c987d831716604","sha512":"f89672e88175d5a5570f274c21f1d5316c42b90726a33d1ca82f0fad614216edcae0c2b619463427fab311d99e70c7f533b2f2bf2d8ae42ff6896db45eaac5cc","ssdeep":"96:G0rgUZdAcPz1epFEGp3Bj5cID3xqLHcKc2tftTJBiLp/XjW2eUjB82Nwk7q:G0MUMcPz1dGp9KHcKcijiLljteUm2NwF","tlshash":"84c186c827689bfcf801f3ee67011868756570fe7ab28765cb2e4e2876468bc5e05cd1","first_seen":"2025-04-10T04:11:56.880812Z","last_seen":"2026-08-13T18:19:58.080511Z","times_seen":372,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6f0811246ac75b78.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.784Z","timestamp":1786645096784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6f0811246ac75b78.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-35b1\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Q%2FbhWh%2BbK87VKrtdPkURRbYX5LgYJDtGfeT3stUMH92KEyu9mY9ap4z01PXnUha8bI51qXNebeQ8mwi19AanaEditPk6IrTBbSosxDPmmOq5kW0dh071eDiAcwI6C9h9lENOLA%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aee9c17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13745,"size_decoded":6603,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec4347ed5373bf44776c09c3b1328330","sha1":"0dad0e80f13b35a544fd607b205af40c26673de0","sha256":"39d90cc08856400cc60f8b465d659ff5c0181cab7b9ece48b42898fdefab5e65","sha512":"c7315707b6386fd0ecb67581bf2cba3e68e1851c63d5116aa6c6a43aecbd253c92be96bf093a5269e10740f0b14c3650f19e05ed72ff76b26f08c38a1b7ec6d8","ssdeep":"192:n1C0Z78U1zqAvmWE8HPZd9cCnSywq7UoajsQWwCwT9rrwxSrd+zq8t3rOGQGkab3:1tIYvvTvZ7cCnSIUoVuOSYGS3rOGY6KU","tlshash":"d15260a833b6f3b8f44bb2e8c23655d9ff0928e57388d675c3602e55810305d99d98aa","first_seen":"2024-08-20T03:26:36.733411Z","last_seen":"2026-08-13T18:19:58.081417Z","times_seen":179,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/fc4e53d5944d284d.webp","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.850Z","timestamp":1786645096850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/fc4e53d5944d284d.webp HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-1571c\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FulcOCqlqO%2BnE228KQ9EA5q1ke6hPxhT585y2OQ0cn%2F5XSlciA8iviufWYLeJZdBJd%2FHL5pVaHi1N%2FmKHy%2BMHhCslVUDuD%2BLmUhbMWmIWj2Ba1A%2BPS1cQvK0ghbW12leFYe0hwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8af49ec7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87836,"size_decoded":88550,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9cb18471e3e67cc779af5387d334f25","sha1":"3a7661e507bc9794c955407bf32dbcdc2cae087f","sha256":"b9ca2bc7108fbeddec8dcb474fbd21c0dc5a27381ee14a67336bae1b98e6919c","sha512":"297f4a3c0cf4dfd708e6d0959db9b58e0dcd12dffcd40ec79c716507836b907ae0a08b69c69555b249c341679c0c0cb3fd27cf8cb385ad15974d290f3d9fd248","ssdeep":"1536:FB9MDS4/DMnS2R0eBef5wFNOBKQnmj9r7xdZz94+YKsEWvcZXdp9lW+ai0:RSaFNOBpmxrNXR42sHcrp9av","tlshash":"8b830291b3248c3af1077bb14542736b719800de9ab18de9f367f996b7940f9c4bab10","first_seen":"2026-04-29T08:38:26.997946Z","last_seen":"2026-08-13T18:19:58.082275Z","times_seen":38,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/media/e8f2fbee2754df70-s.p.0fzkl03jw-sdz.woff2","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.062Z","timestamp":1786645097062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /media/e8f2fbee2754df70-s.p.0fzkl03jw-sdz.woff2 HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/assets/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2sJpyIpOy1hkbXgMmx22LmYNQ14rlaULKKergBbegtteVhBf5pDfQIaiRWbg%2BnXSKw6lo%2BGX3j7I7tKGXN%2FD6OjQqpRAs9UdBN24HFxMnBa9bVNTkjKYlS9XFJJAc%2FSbhJkd1E%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b09a0d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663501,"size_decoded":1664126,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64381)","md5":"0beb2f41971f2ed2ac4d040f18d74f07","sha1":"36a88b427118a28f956e9582541a37d1c2d588a7","sha256":"cddf0bc98088c88ab61fe40aebe532a8ca5c67f6ed72bb984c5ff89b4d1b13a3","sha512":"db25b0d34e3b714b43928636c36e2482668a72d1c36a300c1ea0c6085da36a7ef89f07292aa5a21482c7970194452b2944b0784f45480d51ef5e33733695df70","ssdeep":"12288:vVHbyhclvWngjFzlHsm8WbRkWyi61Pxe4bdpk8WbRkWyi61Pxe4bdtQ+:tbjs5","tlshash":"fd2567f622001a78083777c8a820f97dc31f626def6bca6d61b5ca11f1d5ae5450de78","first_seen":"2026-08-13T18:05:17.086539Z","last_seen":"2026-08-13T18:19:57.936308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/0b9812ea7618a99e.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.183Z","timestamp":1786645097183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/0b9812ea7618a99e.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-36db9\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xEilcpXSwGPu%2F417rZW6a1h4idgwVXRh5gFEO76NZDKWj0g%2Fxy2pOmSUBBUjv%2BG9ZL8Mn0XzWmX0cJlFRdhc81CIz2yIn5MOeEPWksnMXcVzBzdNnTydv%2Be7gIbUqmgLzkyt4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b16a1e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 224697\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224697,"size_decoded":225403,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"b00ef011fa44e8d866173d6633369682","sha1":"8ebbece745fc4be919e09b46fa80f13288674ab8","sha256":"4f56659e63747bd438b4d04441b49b97054727418b0c5c52bea23e7ef07babef","sha512":"95b1adc690bbaecb9a0231b01b7c983a9eac6ca050fcfc24037383cb15c04cc76f4345984943b08b03e3bc43b9db83abf9eb509828def7d3eae7588337484195","ssdeep":"3072:jB2AtO0SBEtL/lzGQ6SDZds2lRmyzvxOP4GZImvF3Y1rVHDF++BEdPx/RG3jLKr:jB/Ou5ndTmcYxZZvFMhFUdf+jLI","tlshash":"2c2423aa23ab8c83bb8b225d31323580b079d65777819b8cacc91fb47db25a71750359","first_seen":"2026-08-12T01:19:43.356893Z","last_seen":"2026-08-13T18:19:58.083123Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/b116155552a06978.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.209Z","timestamp":1786645097209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/b116155552a06978.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-a62a\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5X0KFcG32TK4MzuFKPqD9QjIcwuTHqHYpXMMqbpmpF%2BOSSYJTBcwG5YlhLnlSKFyvvujKe4hUft8DZRFct3QffygqLqg5xkWAqF%2BoO3B1JVRfsLrbRUXmoQZo2szicKMRbvNN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b19a357131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42538,"size_decoded":43238,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f29a002b2d580b931c749a121dcdf201","sha1":"1ce9bb4c01b9ac66b1cc1170fe83fb20d307ecc4","sha256":"c636e9b8f41513fe0b53cc433d0cd7dbace3887d86bcde1759a1016188cccecd","sha512":"bd7b3b9a94608350bdc40239c4507371129f12c6660179d7b935c13cc73595a1a488f63e4cd84fa33be4603c4c62ef786cfb27a769dd5609a14015d08e45c83e","ssdeep":"768:K9gxXgp/oGZVC/AKM9fVc7+4Dce8iw2jwYgzDodhCT+6MVZ+nPFbUiD5:K4KPVC/y9fV6NPTpKo+nPVN","tlshash":"4013028dcacb32e12867de9b2f798745abe359c52be1d8a02d4d40f79e64e34f054530","first_seen":"2026-08-12T01:19:43.25955Z","last_seen":"2026-08-13T18:19:58.083951Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/c636d3d1c93f0093.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.244Z","timestamp":1786645097244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/c636d3d1c93f0093.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-31239\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXdz1bxOvsEtzt6PNWKJLJVEcKSluVSmW2kNdhzmQhuCUo2Usf98U1BgZARlx3uULNJ52sKbkpbtLPcluJVDQRwx0QbwLd5Vx3A7ZCNqPdaOMXmfnh54AsKz7%2Fizbh5s2Zvdfic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ca427131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201273,"size_decoded":201973,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"50aef42017c745deb244abe9f1726f9b","sha1":"3746bd35ec75c0bfd3467042d725e0e69504844d","sha256":"0ea511d0f7bb3d84d362484c3486e9fc59a37bfa1f066a72b2175c2a9f139a59","sha512":"cbe9004282346c04a196e864ff105f49fe5651392ac78d76ed7fc2253dab18758a56fd0678ac6fd9b2331ab5dff1ee91bd163c186d4f7564a2964a524a4dfa90","ssdeep":"6144:R/EwtF4gtMwWEvnPH2P5jzwVgR7/nUN7VuBzaWN:R/EcF4o7WieRjQgt/U5VuBzae","tlshash":"a914125770fa4bd9a9b64800302fcb9f5ad229c86b53ecd403ef6953854a74f4860fac","first_seen":"2026-08-12T01:19:43.352302Z","last_seen":"2026-08-13T18:19:58.08478Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/71ae3a47600861cd.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.262Z","timestamp":1786645097262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/71ae3a47600861cd.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-13b34\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6i5A%2BMElqGqoRXhdx601HDTtlc0R9ddneqtTCMdQDoQRH4tDKYA%2FcydC2xLV%2FVbyW0DhMwqVDKsGq3h2fgAgUGw%2F%2FypUjsgrAcDU%2BYfXWKLm2mkP9GN3FlwTYVL6J%2F1AxNXhZTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1ea4d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80692,"size_decoded":81403,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"333cbb47291aab152078b6ef8bc39ae5","sha1":"885ae3c2060877af9dce022b8e6b99242672ced3","sha256":"85cd7db7e004a345dc28f83f1178851bf7df39c89203c8a81e3d1e7475fe10fb","sha512":"0fd6282ebb596db1f936d5cfa1955b87355680faa0cbe181354701658f3c6478ada78f21bb657c36faecac7c12679ee3efb7c4cee85ee4c9f7a0528e0f0b4091","ssdeep":"1536:Od/BQLOwo7ecUsJL9CE25vNhEux42FX5w0WSpzWX7PX84IrUDFSW4pF:ybL9L9f2rKuF5w0WS1WX7kkDQnpF","tlshash":"ab731299fe44c65e9097670a0edbcdfe84a0a2a23c71b71e64f337d2a17c859205c3d8","first_seen":"2026-08-12T01:19:43.370623Z","last_seen":"2026-08-13T18:19:58.087036Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/208550cac9d057c2.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.864Z","timestamp":1786645096864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/208550cac9d057c2.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-147d\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwcxYCx9K0tx4u4vQJt%2BzWVPGYVovjCGgJpfLLyW9kfR1NZUbl2kwVTGzAXrrtpgZybzbW1IX0Ljy60IrLcevj9A3Mp8XjkKGzb60gj4OjscnhcM5A7HT5kiiMbRyIheSqT%2F0OQ%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69f67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5245,"size_decoded":2595,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5538d997f10a2debfa2e87f36d21c6f3","sha1":"c811d53519e73fa01ba234e5ec3d6ca35a0b17d2","sha256":"ed9c97b51abf41821a94e0a3add4b201614e735fc5e4af495cb29aff366e00ed","sha512":"d74f18f71068479a524820c6af97ef48d757f780548d260f4013b6bc868d500e442164a8f77acf9778582e9552e659f1fc7bbc65ad91f47d2177bf3e4dd1fe72","ssdeep":"96:sroe+OUlHYp9BXMXgwmQ5HZkvrl5x+O4LJeylfrY0pcAWkuqpGxKq:sr/fRXugGjk7x+OEJeYf1c9k/pO","tlshash":"5ab1c5f81ba082d4e6cdebe636253478ae5290f75309895cc7ccae2e5861c5e7c049d3","first_seen":"2026-06-14T08:39:52.304756Z","last_seen":"2026-08-13T18:19:58.087976Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f5da4a7f29415c2f.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.260Z","timestamp":1786645097260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f5da4a7f29415c2f.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-16a50\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyiMK8o8wPh7J7LcX0thXnMJHYZAft9n0UGn1RjNODQ6QgDnagOlxFkn7vEx9Wq10nqR%2BlAF8B3CnbgNZCUppKXOaIMczmfEZmf6VAeIcWCDgy5IZmVTKOiODYqx40FnwExqqBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1da4a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92752,"size_decoded":93451,"mime_type":"image/png","magic":"PNG image data, 380 x 380, 8-bit colormap, non-interlaced","md5":"934f55a934dd78881bbaf0db994c6dc3","sha1":"6bedbd0d23d9c50be8bf74d892afaca9cb0d33ff","sha256":"62e8b6ef2a937b6a7341a5343edc7badef2793ea82b52b10f98b4112f03484b1","sha512":"f9fa2601ac99c3a7c80b8b57163c3cd5d61ecc0f6328b2cad5f00db4fc4ca061c5f7fdffc0ef674876eb6aa3b9881a8e48fc2b5375757c10f33d80b1e7a6ab42","ssdeep":"1536:WXjxVHMNNrRz4/UYRDlyNt+sZ+AdH3esI7HFNhSKlFWwT342BZgSQ2pWqt4wDlkw:WXjxVEryc2ZQZEmO5G+c2rQ2pW9+kGPn","tlshash":"8093125cc6b84cae9be84c2639bbd38774339cfb628750a86a11f5960374663c2743b4","first_seen":"2026-08-12T01:19:43.270552Z","last_seen":"2026-08-13T18:19:58.089961Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.764Z","timestamp":1786645096764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 13 Aug 2026 18:18:16 GMT\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":1341,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fc502deab591a9005413910ef3fb700d","sha1":"5869fa8de7a48943311ebd5f09c2229cad833c47","sha256":"34672e8b84ae711f23a29b04c2ef23a27768043c059f9e0dbee6d653f59c8aa2","sha512":"ab918d46f09cc593fab103540ef245395a571c0e52978899588ac75a0b0b8543933ce6ce3f21e9310f6cd8c63c7a7f51f5d9cf84e4b19a230e3fed0b89bd38a0","ssdeep":"192:YRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+Oju8:4QPTzajde","tlshash":"92f1ac91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T02:32:45.701097Z","last_seen":"2026-08-13T18:19:58.091316Z","times_seen":4066,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/d7b307a7220a0203.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.779Z","timestamp":1786645096779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/d7b307a7220a0203.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-4805\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhEjVUvvbK9fSE2NbH4T4PrVmSO9caCJ71xJ%2BmTFDXXCoMW8dXHUAMmCiFiaM7gOvpOgIfkyJAzjVMTUJxeJfmyzqjqGiPdBKTSbW8sdDVGpvV8%2BeVyj0ZsYAXk%2BXntelNssCec%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aed9be7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18437,"size_decoded":8540,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8283f502a709ec28f9813b70996d191","sha1":"afe9254a533df88e58e148ee55222e60f6392b79","sha256":"5e725add4664e940553ce65f53596053a0d8608b769f178e1d7eccffa8c127de","sha512":"15ecb1d97437cd10748376d6e451ddb728fb9fc35647815af21c16f12d40442c73e50f40343878dbbdd012b1210417f5d90814a05a2e3c027f20e52debe73045","ssdeep":"384:WlP4naM5ynU/ePMq4+/gY6PegjD8TDcUBopm+pKSf/5IY:WJ4naM5yU/eiY6P18TDXoHHHj","tlshash":"3882b2ea3b319bf4e486f6fe976224b0be0228fdae428678c3741d15b55245ccd84cd6","first_seen":"2025-01-29T03:17:51.200539Z","last_seen":"2026-08-13T18:19:58.093054Z","times_seen":147,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6f517c3469c6ab6a.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.801Z","timestamp":1786645096801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6f517c3469c6ab6a.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-f38\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TH52nl4lamrjMeH31hf0dJfLq3LaD7dXCPVcIIWCwfVgi2lu1iKZ9nnJUgOX0MuEVKEXRDriR4iWU18qR7w3GL3QJvCrlSg9E5WOrpZgfn%2FgkYDuPSUhfMFVxV5c%2BjieUPx9KQ%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9ce7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3896,"size_decoded":2381,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6133359c46b7db0fcad6a226cf6f7610","sha1":"12fdacb155c74b44c532da587269d8f1ac38736a","sha256":"2c2810d3b1bc4cdbd2b4e4ec954cd0f544234afcd6e5cc6ef37e898ae4045092","sha512":"f9323c371a551bb132a7ccb161dcd03c8a2812770696bcb0ec18c247d3c9f1633ea333703954f9bbb6fe52ba9e8bd9fac15f3b5f04797dabf8df5e2c4ccc28c5","ssdeep":"","tlshash":"6f8194e5237883b4e06ae0f7af0a35bd5c53b8fcb25d4ae3c3456e452848254696c3c5","first_seen":"2025-04-25T04:21:01.420467Z","last_seen":"2026-08-13T18:19:58.094002Z","times_seen":96,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/7ccb5f06cc068b6f.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.600Z","timestamp":1786645097600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/7ccb5f06cc068b6f.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3924c\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpwnsIkpqa7Mn6VsmzZixz4r17TOu3cqEogmgEoZbstYUvR4UTKkmFKou70E%2BewQO79rswGrmvjJVapH5B9PmSYPpWZUy0atI2xNu0DlDffhvpd3JhyBNXZm6MB76rTIZDDGo4k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa777131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 234060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234060,"size_decoded":234760,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"74aaf2f8a5bdd3fb84935c37ffcce97f","sha1":"6d80bb9639ee07fde4c18fb162e23100e9e08285","sha256":"60fbf231a46190a3c13cb75084c14283d26dffb741e773dcda0ba406a1c3076f","sha512":"b125a5a68dd5ac361e38192e23db74680461f1ddeecdebb65084e878ad1e91924b4cb53d73fb0f5e558ef29bb178230b4b33b615a012d6e756cb3d740f4d99f7","ssdeep":"6144:JoAGsJiueyK1lIJ72Tf1524kkNWEkkSV78PlLD4QhGZ5hw/KtJCbp:GMJuR7w2Tfu+WdNJ89Yu5bp","tlshash":"7b3412d4a9f1ca02106d19bbf1494ec47f1097311c9beb320dfdfd9e61e9a3a1845a72","first_seen":"2026-08-12T01:19:43.26753Z","last_seen":"2026-08-13T18:19:58.095074Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6e7851a917e67d5b.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.834Z","timestamp":1786645096834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6e7851a917e67d5b.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3aa2\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mgd38LZKQ7WSik%2FHWqrEX3%2BdpV7d5BOZG8wbypDV15tB%2FRQW5uYAXY%2FXQjAa66QkDQ8kjiL99Ze6O1yklNwuXR3yWAPvS2BmOEicdBsBJna%2F%2B4tfPjrBKk67oXI8JjOmwjtkV4s%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af39e77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15010,"size_decoded":7019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88beba00397b88bce2b5dffbff7f6078","sha1":"1d7695b625337136db6a2898bb618a4913a93433","sha256":"385215cfe3f0828566f6a3c31e7c8459ec3055be83b466443aa194375899bc7a","sha512":"f51ef21f9db96f7ec3f3b37e0a50296a59f207c7b78bbbbee43d5856db44254547ad5738af494f214fe099768af93830ccb0a4c0cdc34a35d561ae61967f07b3","ssdeep":"384:xo4PCe+9xrcLLNbWfF7cqWymXxBW2ooXA3QOJ:S4Pexra5WfZ0ymto/J","tlshash":"866208c8b77892fcf041b2f99a17e4b42d463de26961c438c3e62d1aed9906c4d66cd3","first_seen":"2026-08-12T01:19:43.333877Z","last_seen":"2026-08-13T18:19:58.096219Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/5ea3020ed6e2cac7.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.206Z","timestamp":1786645097206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/5ea3020ed6e2cac7.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-2af5b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUi8o8hQFJgha2YWIHWtmkmxgXUS5hiJFXFfm7VZYjWOL8xx996fQMiX0AH41vqgBHa%2FLVVIOxRcRIFT1Uyb0hzQqUUQbCyHVs1pNYRYHesAJ70YHJ20hQiK9CWwXb1jVz0Da9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b18a2f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175963\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175963,"size_decoded":176663,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"802995739c15878f4445311f8c408d25","sha1":"6abe3aa54621adbbfd56f23af833ce7f33c25ef6","sha256":"495825d093980a6f4e867b1b542a324b5fe4c95b786c76825a13b08ec73be6ed","sha512":"43e81b5a8004e693a7e2b635ce5ebe945280cd141f1397e91a8feb85eb70a9ee0020023d59ec4d584566067923da9c1f184c3f277572735e3eabe85af74e5622","ssdeep":"3072:iY4Yc3V2vFq13FzibLbQVdh7RiIQ2aqawqmYwTD73+Mf3JBhMUA:iY433O4FGbnu7RVaqawR//+Mf5PMT","tlshash":"b70413026d2068a51a6b6f87b1ac6ed35684b7b21f7d1d385fee40edc0ed847c247292","first_seen":"2026-08-12T01:19:43.296018Z","last_seen":"2026-08-13T18:19:58.097487Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6b16b10a55cf30f1.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.596Z","timestamp":1786645097596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6b16b10a55cf30f1.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-352fa\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pxbds%2B49Gh%2F2h6ucQpA74nNwJw9WqX5pM9pfPWiHcdgicM%2Bf1K%2FWwWPr0iKuMSikN7hwxBVWSVIk090O%2B8tdYmGbDddI2heKkhgDKlUvGTS7azJFNz00WDtD9LW1cPbqkaiDPL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b3fa747131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 217850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217850,"size_decoded":218558,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"77cafafd6aaa80aa3457dafb56a70609","sha1":"c7258b6df41b9596d4382d902cd631868766b553","sha256":"03b15d77cb5d8d9f62ad74abf546ad6112feb146b903de2032dee45706f0e8fc","sha512":"4490264dc14487cb30b46d83d606e0ec54fb6abe5590dfaa2cc47b52674b64d16dcf901af5f28189fd5628b1f98660915ca1df10823e5a2c4b20b19f63629042","ssdeep":"6144:aNT8JkYm2kyINrqH34NUfN+unjhhEWwftC:sFdFeoNENjh/S0","tlshash":"0b2423da91e599d08c33ac60de171de605352f5aca523578800ae85de33fa7b3680ff8","first_seen":"2026-08-12T01:19:43.288363Z","last_seen":"2026-08-13T18:19:58.098399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/29d65e2823188631.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.845Z","timestamp":1786645096845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/29d65e2823188631.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-1d38\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUZ0zLf7gaw51mKtGzhly4kDRf4msYY7Gs%2BNNsLxls4TS3p%2FoiSZJ2A8xYl%2B3NHbD5fT7oS3z1UM%2FBrEsfODgl1gED7uGB4%2Btwkg08w1DruhgfRU%2BdclxtOZT9bB0Apzd0XZKEg%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af49ea7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":3900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3722843dd62574a69a7ff815395927c7","sha1":"d06d8164e20bb17d11abb216033705d78b856bd3","sha256":"829f5f41f66e7796f118dcb9c41c30423ecac34846a6e8d81c7273e54a3ce4cf","sha512":"3dbe860be6787fd0b0e1082d5b125dd433b40f5b7ebc7b9133259dbc3c1b482a3e28b5eb825ec029ed4fa6094c16618759adca11194f8eb99968acb0e2d1c030","ssdeep":"192:tYUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tGXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"79f194ce3bb09ef88d75cbd2ff1320697a17c07b59848e20e1595f0d2a9081cde95d8a","first_seen":"2025-12-01T11:28:00.242862Z","last_seen":"2026-08-13T18:19:58.100297Z","times_seen":66,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6e68760acbb5ba9f.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.871Z","timestamp":1786645096871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6e68760acbb5ba9f.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-22a1\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYaGzXzjYFPZvC8uXaD5sMPtXqAI%2BbDnp1uuU7iUhacwg7OcdIsADehDvazHmgyCwL0k22cXtWp%2FE%2F9LdsSbCw1%2BnxjM2ZUYVzl2GFZW2tpLa5XHpxuFCshEgY659LLNfYkL%2BxM%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af69fa7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8865,"size_decoded":4648,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"203347177d54a3c7a2d3394cc05705ce","sha1":"c0dbd725e740c378a884300232d5646737de945f","sha256":"ccc265414c2b77ba709c12d2020a73de6ce3b53aa2c5b124ddfeaa30ecd0843d","sha512":"8192eb362a7fc6ec51aae6e07e1855a04c934b2a11c9008868847ee6b3b728e45c23dae3b8d0f0c827dc6146fec8023c3f5c0df02346dcd040bd06a0e57312e4","ssdeep":"192:PUUApqxT+8RzF/bSJwuCN0F/hKkABfYOUH+EnMkBpXhl:PUUQU5RKCN0F/JAGHHvnMkBp/","tlshash":"5702b6cd3b78a3bcb501f8fe43112068394a74e77d62c5b5c3a32d59a8428585dd9ceb","first_seen":"2025-04-09T06:18:07.49922Z","last_seen":"2026-08-13T20:36:53.715287Z","times_seen":203,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/74abb05281533809.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.194Z","timestamp":1786645097194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/74abb05281533809.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-30134\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQNNXSG%2BjmFuccMeR6CbRCJ1y5jpAQGpRalg5pwcD2tQW4P2vVD2tRzrsAMvuypHJSlcEooFqHXxFNdvMxEzHpeazn3yGOdA25xM2woDdIl8VgDbwyPkJJ7FGjICT4buycfj%2F20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b17a267131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 196916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196916,"size_decoded":197618,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"b7c48694ec45182524b87560b19fa153","sha1":"ed32057c7a187d63495ddcfc2960c3b5904528ea","sha256":"683c26c270085674fdeacf1777fef2b53e0eface4507d0a80e7f5d69e32f8dcf","sha512":"e3a11d0ccad7ab20ea93f7f6ac7f9b173d182265089a61854ad073019adf97ae44700d6f832db2c16249cf1e2b50bf81d3ce80a6337c6af64e5cefe0df494af0","ssdeep":"3072:3dAs/iYMBCata1R9/Wonf9QnOW1OGuTf3cGUxcWd2xMdcrlclqmsF3u9sl:2sK/Qb/WAG8f3scWdPceqxj","tlshash":"0c14131743eefed2e128944f84524fab79bb80c6c0729b3e39badda15b16475fc01680","first_seen":"2026-08-12T01:19:43.284344Z","last_seen":"2026-08-13T18:19:58.104001Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/035a550d857988a4.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.221Z","timestamp":1786645097221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/035a550d857988a4.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3e56e\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GfBXf%2BEHOOc%2BMdVtyXUG2C2KYY5VqllEtrQ2b5uE7LLq27cgWUS6kJbjqdiW0w0alFgDtK4o41N8u33fUOHvOq6YLE4WOx1PPBr%2F3gIEyOAQVVtQ1rH0ZNxLv74myU%2B72wGbUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1aa377131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 255342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255342,"size_decoded":256048,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"b43d458162abbff06f68e6c821924a67","sha1":"bd89b979768da54eabfa16892c88d1c326a3fc11","sha256":"715635c453ab17561ce02a8219f4c66141632ea83e49c0f3bfb1233a0d3ea9d6","sha512":"7d901e48c11f692ff75b817858b8d35de23d52d159a4892f8ea63e61ce1c3d665e3ac8de546f074168bb7136f5bc0eddab19764637f8c8d4fd80222cb68743a8","ssdeep":"6144:QZs2rV2sYubbL5PucykhWEzPsTRJ5a5Mx1636aqfjr+G:Q+sYObLtvzoA5Ma36Dfjr+G","tlshash":"b244220cfaaccaddee6482b7bc2f9f54207c084bf27607acd37157a19a8d5d409844e6","first_seen":"2026-08-12T01:19:43.298999Z","last_seen":"2026-08-13T18:19:58.1053Z","times_seen":4,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/680b5449f3df92be.png","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.253Z","timestamp":1786645097253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/680b5449f3df92be.png HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:17 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\netag: \"6a7969b1-3601b\"\r\naccept-ranges: bytes\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=miDY6EsoexB9WK6O83HYEzdohcJnkcj0T1PRWj6p%2FG2XZkLvZal%2F3LrEoZuvsLxyxHGU9vp5XYzA1KdwIBrso0iBcM%2FM6EIXFDmnOF5f0NpRuiK0Ok3afkEiXhHI0vDfzky76ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2a9b8b1da477131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 221211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221211,"size_decoded":221915,"mime_type":"image/png","magic":"PNG image data, 383 x 512, 8-bit/color RGBA, non-interlaced","md5":"58f3ecd7d2edfbd58c7a65b4e2f82308","sha1":"93d13bd3fbed894405609a73fba23025e4e2f0c2","sha256":"62f86f35f25f176a37056860305f6b74c955952e047fb72d7234761126775a14","sha512":"66fdd1137c854774d9286a0f4e7b9ec9d7d5ccec7bd8149b9e12f42b0c1c6d7210c8339335dd471aad4ed86befaca6d8388500650972e7fe5b635ec3835aad83","ssdeep":"6144:2deuiHSP8pOOrqc99+0uQrNuA7/VxUTgQNpRv/WGBL:ubiHSP8pPqcZuRAYDpRvbBL","tlshash":"162423c7bf297a113802f9516e14e6298755a98f07dc1bf01b0cfc4afeaab51580a94b","first_seen":"2026-08-12T01:19:43.381899Z","last_seen":"2026-08-13T18:19:58.106797Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/1863293e6af45f84.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.793Z","timestamp":1786645096793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/1863293e6af45f84.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-3c7b\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaMjnc%2BG45bRpD5QZc82MWsu3%2BECb6%2BJH4QxSzbgbNlk9hhcVFWj81COMu6GKu85nM1WNLsNFuMT%2F2nKLUT2%2BUCAkwndqyeslFksKB9V%2ByfQac%2BFfgjItgho%2F2M%2FSrB6sDO5mKw%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8aef9c87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15483,"size_decoded":6743,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f0e616e3e19b99b55fa12505820cd2a","sha1":"72bb7e1f0580aa6a0308de40440762c88078f813","sha256":"5208ba82778981e912fd3d42f623f5a713fae642216b0b2fac0f242e1561cfcf","sha512":"25dbe0c851e82cb74b0860e86bb6a3360f6ea162f7834b1e2bc21b158c416c3ac8a3b5c6b4842f7e2cca22cb2333e031d641085831de3bc072641b4d2896275f","ssdeep":"384:3bTEiiKzT9TJEtREb3PC+crkesot645TZ:3bTEiNT9dUSfCrps8nTZ","tlshash":"d66294c42374e2fcb408f3fc8717a8b0bd466de63911e468c3a90c95e69145d8ea6ed7","first_seen":"2025-03-20T12:05:08.602569Z","last_seen":"2026-08-13T18:19:58.107961Z","times_seen":145,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/dfa5bd8299feff77.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.826Z","timestamp":1786645096826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/dfa5bd8299feff77.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-822\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFX3wPdjnKBtbd4r%2Fu365t%2FWgcm6CZ8CGc40k7NhQq9Rx0xy%2BMgoZ8cT8VK18SUVZjjG9FlJUMXY4LhN%2FfwQUljKAMMvuzQgDZ6YdtoYxn19mLMC5VvfrGteKZ6IU1kNHITwMJM%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af29e17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2082,"size_decoded":1649,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"866dab97d2364ef4b95af7878c2394da","sha1":"113f9cf88e6aa6451f247e51df9347026a2e59f0","sha256":"3bd24cfce17e61b7280626875873716e93c45fe788492a97f2ecd1e66b74b906","sha512":"ed7f90452ff33d7fcf61e45d9ebdfe284c5d94f6acfecaf865046d8963e30ef42407a0d8e662ad94c7c00a69c236ba5ba491013eb2371a3add1d1d44e8a871d9","ssdeep":"","tlshash":"664152f437284bb8ee6a152a2727d4783216f1e7fe0da110d2a96d0bfc400a9dd608d3","first_seen":"2026-06-14T08:39:52.576053Z","last_seen":"2026-08-13T18:19:58.10893Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/6a16445e9d68da80.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.841Z","timestamp":1786645096841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/6a16445e9d68da80.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-2a554\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icmPjCXJwzFdsuA4l%2BBFUsFuH9BAJDZMS96xjFyS6RULkFwHHwyidpvuAJwd9DcOaiJlvWybK0tcvO0IiSiE0pXJbXCnexWDjOCv7%2Fd%2Fry9mwVDSX9mG5us%2B%2FuhrAJjWpyZIegs%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af39e97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173396,"size_decoded":97008,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43681ff293bafa36a7a792a1010c8f2","sha1":"2f1ee8d707d0dfac0bcc4909629481f892f57d33","sha256":"74d35636d04e64a74d9abb57e2d7e5efc928de576a8f1316804269b1c5e50491","sha512":"4de1668dc126bb06ef20241d72ec361ea25451a597d68b68ee1441d9d2ff09b560eb1dd67f5129b961540c989ddabfff03badaaf1b11c00623e39363b9b89669","ssdeep":"3072:3nSJOyPU7ia0GxpWPj5ENqlcKrcA/x5rSvyw8/IzbSw:3LeaQ915rN5uyw8/Iqw","tlshash":"c204902f5c4cab4e37321d6fcb07643e3e8625ecb25991cf689fb4edd6260509660da0","first_seen":"2026-06-07T03:39:13.667511Z","last_seen":"2026-08-13T18:19:58.109873Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-winner.com/assets/img/f0ba88b9a9444c6e.svg","fqdn":"rainbet-winner.com","domain":"rainbet-winner.com","tld":"com"},"ip":{"addr":"172.67.184.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:16.856Z","timestamp":1786645096856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-winner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:06:06 GMT","end":"Sun, 08 Nov 2026 06:04:40 GMT"},"fingerprint":{"sha1":"A2:A6:E8:51:E1:78:48:BA:4D:A2:9D:1E:D5:BC:34:47:46:72:0A:3E","sha256":"BA:3F:23:01:BC:6D:2A:99:FC:60:1D:99:DD:AF:93:E4:4E:90:1F:97:6C:73:6D:65:68:25:88:B8:39:B8:51:05"}}},"request":{"raw":"GET /assets/img/f0ba88b9a9444c6e.svg HTTP/1.1\r\nHost: rainbet-winner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 13 Aug 2026 18:18:16 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a7969b1-9143\"\r\npriority: u=3,i\r\nlast-modified: Mon, 10 Aug 2026 06:03:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgK7SuR5GIsHu4guD6WCiTW3UdvExzmpWgiB02U0CvYg6r5VntwmPwM4p%2Bqfrdf%2B0%2FFWca0s%2BdRsm8AR%2BZlx5YTWn8L45EPEFYZq9%2FeTKPjJWJJHy2E21JI%2FqI7E7a9108%2FHtds%3D\"}]}\r\nage: 830\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2a9b8af59f17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37187,"size_decoded":15598,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d26f36591635e97eca7d8cf7838d262","sha1":"68fab0eb3bd651ed517a16eda4df28017da6a6e8","sha256":"0543f0db47d17a1a62f17aa370086d2c8389d73195671c789aee06c984c040e1","sha512":"5264c8e4e5806d28ce46b7050167c70fa928f6245d11034bf4a969765931933f81f673007e00803c92e03970c366a3c2247ee3b92f445b7640d7c057d467dee2","ssdeep":"384:6J413SHKOXHCmG7A5NLGSc6aUMFTS/NQNglqZycTBymAqiro4Zcwf/9XeCE+hyFk:6JSiHKj5crLGVFXHZly8L4Xh4HTvhE","tlshash":"b6f2b6dc2bb093f4f486f7fada1350a87e0f64fa2a418664c7689e44b50349cdd86cd6","first_seen":"2025-01-29T03:17:51.147915Z","last_seen":"2026-08-13T18:19:58.111121Z","times_seen":87,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbet-winner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.rbgcdn.com/223k2P3/max-w-32/rewards/ranks/bronze.svg","fqdn":"assets.rbgcdn.com","domain":"rbgcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.192Z","timestamp":1786645097192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.rbgcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:6A:67:5E:B0:B2:DE:DD:7F:B8:C8:11:50:2C:87:BE:81:62:75:AF","sha256":"68:0F:9D:EA:F9:B6:CF:0A:D8:4D:A8:D9:C8:53:0C:17:1B:57:A5:58:AD:4D:CD:77:B5:78:88:A2:86:7A:39:B2"}}},"request":{"raw":"GET /223k2P3/max-w-32/rewards/ranks/bronze.svg HTTP/1.1\r\nHost: assets.rbgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-winner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 544\r\ndate: Wed, 12 Aug 2026 16:20:56 GMT\r\nlast-modified: Wed, 12 Aug 2026 16:20:56 GMT\r\nx-cache-perma: Miss from Bytescale\r\ncache-control: max-age=31536000\r\netag: \"daf83bc5d9f1fb9c14af5c7e7af3e1d7\"\r\nx-cpu-on-cache-miss: 172\r\ncontent-security-policy: default-src 'none'; media-src 'self' blob: data:; connect-src 'self' blob: data:; img-src 'self' blob: data:;\r\nserver: Bytescale\r\nx-amzn-requestid: 1047ff0e-f9d5-4e5e-8bca-ad6952805c14\r\nvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Cookie,Authorization,authorization-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: i-w7DxvJQ56Gzvh_tjHtLYdwxCPZZcEg4MPSF0AQ8VNU2jo5WUqg-w==\r\nage: 93441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":1397,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daf83bc5d9f1fb9c14af5c7e7af3e1d7","sha1":"bc6f77478dd01e53aeea7d400f8efb7fbd233814","sha256":"5ebcf7d3b74b8681788a3d453a6f2ac7ba98f4606007c816790849c574bb6e23","sha512":"94a62b9ec5aa4d9b98f147ddf35ca446d8e672d7cc51ede0532c4e76ca476194f788d2e84c10312ec4d5b5fb9cb7ef7e7802e8ccf8cecfcdc5043b5ea201fb54","ssdeep":"","tlshash":"25f0269c443f110468581d75027951d4722e258c11679d52856726df070d7267c354ad","first_seen":"2026-06-14T08:39:52.548723Z","last_seen":"2026-08-13T18:19:58.112122Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-winner.com/","date":"2026-08-13T18:18:17.643Z","timestamp":1786645097643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-winner.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519068\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-13T21:46:43.785015Z","times_seen":549097,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
