{"report_id":"4da95e6d-30bb-4012-a4ea-8e42b342c10a","version":0,"status":"done","tags":[],"date":"2026-08-18T03:17:07Z","url":{"schema":"http","addr":"rainbet1.vip/","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rainbet1.vip/","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"title":"Rainbet Casino — Вход, Регистрация и Сайт","dom":{"size":23704,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7416d0568f0f563e00bcdc857c522dd7","sha1":"9a408ac818cb8d46e33b5b420a197954010cfb61","sha256":"455e4b4561181ce1ea4d31c4a9628ed34e0ac24811156e6f07a78eaa4c5d1fb4","sha512":"5aedfc7093ac6184684a1f073e67c009f5315b3e7f2a0eb7b73c5a344eb3462e51e112e0753ce2d3f0f16275699d63528b928c01bc7016993408bd691a47b6c9","ssdeep":"384:TRUU3JYSOG/700VWOchByBpHmUqWRIC7kekE1XuRyH:u1SOipmzWRIgkC1XuQH","tlshash":"c0b2546165f914af0113e08bed157a0a3daa91bfed5a161233bc1e9e1ff2d61c93b10c","dom_hash":"domhash84e3c5749fb5e81f1ca41b1e88b1f749","first_seen":"2026-08-18T02:46:03.429632Z","last_seen":"2026-08-18T03:17:08.200204Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet1.vip/","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T03:17:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"rainbet1.vip","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-18T02:46:00.26623Z","last_seen":"2026-08-18T02:46:00.26623Z","alert_count":0,"request_count":7,"received_data":112149,"sent_data":3385,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet1.vip/","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c1d0cbbb4e8be597f8c688566358f22","sha1":"babdf61cfc8625b9c50e8a4cd3a3e27ae2d9da2c","sha256":"fc4e25c379d6b03800bfdf4c44726213f819bb49902bc56334176a586066eeca","sha512":"60c718a824b4a6d6c2ec8d712cbd0fec06b39cab95e1ae72d0103b8ee749b8f67fb18fe584e7e696d2464a60226a58584b987285c45d22415d34b2ded9176d85","ssdeep":"","tlshash":"f8f0e1e73c8a8074d2bb02992b7761983435163fbc0fec10f54c2c411f50ea5448bd4c","size":581,"data":"","first_seen":"2026-08-18T02:46:03.45247Z","last_seen":"2026-08-18T03:17:08.208883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/assets/app.js","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d506f7574adfa901ede48ca20a6b6d6","sha1":"886d01722076fcab84f72fe77407675c20f2dde1","sha256":"cc81429cd6fc20045db46de751a60bfed0b290ddaf6ac50634fe9fdfea692014","sha512":"147aec845e5a232acadfaededab98e67ae6b64f17e789777bae771432f157cc9adea9feefc2d7707f1b2e519812cf673f7b58ca3046d6acde1592382163529b2","ssdeep":"","tlshash":"44119b69217b093101f710a2bbe76185ba16303ba486e4587c6c85880fd4c4662faaa2","size":989,"data":"","first_seen":"2026-08-18T02:46:03.445145Z","last_seen":"2026-08-18T03:17:08.206165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet1.vip/assets/styles.css","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.088Z","timestamp":1787023000088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 157455\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"styles.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: W/\"3cd371695677dd302cabdcad3e5566a0\"\r\nlast-modified: Sun, 16 Aug 2026 07:32:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8wxks-1787023000089-c83ad98db188\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34264,"size_decoded":8392,"mime_type":"text/css; charset=utf-8","magic":"assembler source, Unicode text, UTF-8 text","md5":"3cd371695677dd302cabdcad3e5566a0","sha1":"a8d2b73e6a9cb5c78c66395b7d5d18fffa45ae3d","sha256":"f09ff52a6ea0ded07863c529de53e8d4db5a11c502e31e3418f2d52d06cc99fd","sha512":"0d6c9b6e60601acc0052ef9240f9580e5540336a25fefa631d4a4a818f60a1b82fba52161b9be56aa8bab76518fe50c0bccb6758ba2c81371e61741e2feda474","ssdeep":"768:I4krZBhq8GyKLvFgeFiwedc28wEl84d4i5:PWZdGySWwedawYd42","tlshash":"35f275de67b50518753fe8a4be93af49b329e013d10ece786be4205c9f891e95231b0d","first_seen":"2026-08-18T02:46:03.440862Z","last_seen":"2026-08-18T03:17:08.201447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/favicon.svg","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.331Z","timestamp":1787023000331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 157452\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: \"49d0f90bc8e86bf1bae464c1ff1140ea\"\r\nlast-modified: Sun, 16 Aug 2026 07:32:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6z4q5-1787023000331-02eb69453630\r\ncontent-length: 500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":500,"size_decoded":1016,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49d0f90bc8e86bf1bae464c1ff1140ea","sha1":"83e6ad7790d24c8c4282b162abc913dbdb45635e","sha256":"413fad3fa7c30346f0a88a83ee91e23ba0b38885e7f504cd4017955d2033034b","sha512":"511d99bcde9909f6b31ebbfd2ee4ecbd0b559b6bd0f8857fb71dca676851aa73759b9ffc1df8de67e08abf54a7904d974b77b6bc52b4293702067ca5c12a0366","ssdeep":"","tlshash":"98f0d485c06c1e1ff52cc918de6470a4971e215391c7c2a071498d39e7501cb3c0b6f4","first_seen":"2026-08-18T02:46:03.435747Z","last_seen":"2026-08-18T03:17:08.202408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T03:16:39.803Z","timestamp":1787022999803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 157693\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 18 Aug 2026 03:16:39 GMT\r\netag: W/\"aaa0050af7524652ec9b46b48b70cedd\"\r\nlast-modified: Sun, 16 Aug 2026 07:28:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2gblx-1787022999873-94afaf6516df\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23671,"size_decoded":7052,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"16ed3127ee726dd06dfb3a191750e6f9","sha1":"09772a5d4153de72fdb25fa1ffd0f26883b0ee4c","sha256":"2fef44fdd468fc0c01e9a0d4e63c7de3f41526aacaffaa5501130cedbc0f9192","sha512":"9c1c9ca563f1affab89ba989d7fe07bd292479e1bda611c6e6f9aadafd2b320bb7ca6e784bb4dc0e85885810f49ae2233afe062e011c4c1797c4df868821e8f6","ssdeep":"384:RRUU3JYSOr/700VWOchByBpHmUeWRe7kWkEY2BRyl:Y1SOnpmhWR0kaY2BQl","tlshash":"48b2646165f914af0113f09bad147b0a3dab91bfad5a161233bc1e9e1ff2d61c92b10c","first_seen":"2026-08-18T02:46:03.438716Z","last_seen":"2026-08-18T03:17:08.204423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":35,"connect":1,"send":0,"wait":10,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/assets/logo-320.webp","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.090Z","timestamp":1787023000090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /assets/logo-320.webp HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 157456\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-320.webp\"\r\ncontent-type: image/webp\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: \"3b1f6f807ed81efea48535b5795252d7\"\r\nlast-modified: Sun, 16 Aug 2026 07:32:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qxc47-1787023000091-9ec22ccf6e16\r\ncontent-length: 10810\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10810,"size_decoded":11327,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b1f6f807ed81efea48535b5795252d7","sha1":"f72ddf49ab52bf66cf87f4b6382dbcb10123a4f5","sha256":"6d27683edadd6563c831d68e1c1185cbb4c4fffb3bfc44a3323b7415a3b3c23d","sha512":"e8d883f27ffbf6be46df432a95ce0b75590f00c72f9c9ae25d65277d038bf309126180b2e0b1f9eaf3fce32f69a81662eeb3142878567d01e9a270fd2ee08ae0","ssdeep":"192:r4G2vj5mR+zwG8pORADXmq5Kaia4QAav4RRqESAvWCkra8x+MgXYwGW:F2dmR+zvUXmxaifQAavERqESAme8x+MG","tlshash":"1022c0fb3011228f76126bfd3c52eb11704024a424dee17d6712af346f5de79a594da4","first_seen":"2026-08-18T02:46:03.44287Z","last_seen":"2026-08-18T03:17:08.205419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/assets/app.js","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.092Z","timestamp":1787023000092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 157456\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"app.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: \"3d506f7574adfa901ede48ca20a6b6d6\"\r\nlast-modified: Sun, 16 Aug 2026 07:32:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b9tkp-1787023000092-ff602d494c92\r\ncontent-length: 989\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":989,"size_decoded":1524,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3d506f7574adfa901ede48ca20a6b6d6","sha1":"886d01722076fcab84f72fe77407675c20f2dde1","sha256":"cc81429cd6fc20045db46de751a60bfed0b290ddaf6ac50634fe9fdfea692014","sha512":"147aec845e5a232acadfaededab98e67ae6b64f17e789777bae771432f157cc9adea9feefc2d7707f1b2e519812cf673f7b58ca3046d6acde1592382163529b2","ssdeep":"","tlshash":"44119b69217b093101f710a2bbe76185ba16303ba486e4587c6c85880fd4c4662faaa2","first_seen":"2026-08-18T02:46:03.445145Z","last_seen":"2026-08-18T03:17:08.206165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/assets/logo-84.webp","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.099Z","timestamp":1787023000099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /assets/logo-84.webp HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 157456\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-84.webp\"\r\ncontent-type: image/webp\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: \"a87989fc3db6e2902d8d5bd37e445f1a\"\r\nlast-modified: Sun, 16 Aug 2026 07:32:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h4jbc-1787023000100-50f42dd1eae4\r\ncontent-length: 2114\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2114,"size_decoded":2629,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 84x84, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a87989fc3db6e2902d8d5bd37e445f1a","sha1":"053cf27ec09d6a13937edf36b6e5f4818066aa84","sha256":"b1d9b6630c26942e7e7641c23f7de2cafa91c796b181184c2be760243b4017d3","sha512":"548463201ce87fa29fbe3a31629de66c99dec052a3278a5a5d2f2a1566ac3e23b4bb014763d37bb59843983d4317c81f0dea3c214d9e350e8f750023e1d4f2ad","ssdeep":"","tlshash":"a3413a05e26e90e7899c2abbc386927f2632900fc16fe6d3468c16e51f54a307d6d8e1","first_seen":"2026-08-18T02:46:03.450849Z","last_seen":"2026-08-18T03:17:08.207038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet1.vip/apple-touch-icon.png","fqdn":"rainbet1.vip","domain":"rainbet1.vip","tld":"vip"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet1.vip/","date":"2026-08-18T03:16:40.329Z","timestamp":1787023000329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet1.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:24:41 GMT","end":"Sat, 14 Nov 2026 05:24:40 GMT"},"fingerprint":{"sha1":"E1:09:53:2B:C9:A1:22:66:A3:DB:47:C9:B0:96:CF:61:2B:37:12:C8","sha256":"10:AD:3C:00:41:6D:B3:80:77:58:58:27:68:AA:50:DB:94:40:62:3F:BD:8B:51:90:21:20:EA:03:BF:ED:86:53"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet1.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet1.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1868\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\ncontent-type: image/png\r\ndate: Tue, 18 Aug 2026 03:16:40 GMT\r\netag: \"40535448360a5711e42b26314aeeb2f0\"\r\nlast-modified: Tue, 18 Aug 2026 02:45:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6mtjw-1787023000330-420903015aef\r\ncontent-length: 36207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36207,"size_decoded":36728,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"40535448360a5711e42b26314aeeb2f0","sha1":"fce3045d4d664fc4e1ab4a92f5d1151d1882a2c8","sha256":"e2700bf2892ae1c948aa438c509fae0113e438c16302bdbe4c14a38597da6084","sha512":"26addb44118a3eb4c8abbdbf4d4a6e72fbf6e1a0538c13d38c238a8bb9c4d83f42698c3768de6aec07d44b27cf1fb5a2c6a126992992160c91bfccc5d242b898","ssdeep":"768:GL9KkGiQMr5kERGuVtxHQTPpsZzTWwbUi3SGI2j:G8kxvr5kELXQGBZ5SW","tlshash":"07f2f21dd653b410e523d5f88bbfc7919832b435543898b42a2c6cc276cd264b7eb3e8","first_seen":"2026-08-18T02:46:03.433166Z","last_seen":"2026-08-18T03:17:08.207788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}