{"report_id":"5c37535f-89d9-41fd-9e48-f28543dd723c","version":0,"status":"done","tags":[],"date":"2026-09-19T06:47:25Z","url":{"schema":"http","addr":"xn--ranbet-cl8b.com/","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"title":"Rainbet: Online Casino and Sports Betting","dom":{"size":584273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"a245930329f00a033aeb4986e8d9c360","sha1":"3e79ae5cc217e1e48255474d4743963d75e66149","sha256":"4f372ee49f7a0ad960fbe666567f9c1182aff55c1903b3bbcb0037604a8e7b57","sha512":"94e95da0be507f1f377983db4e012b5da219bba508f207fd079c6f5ff514973b6f35de2c170a0436e1686e6ec0041956426531f93ec1054162be245952bd9f16","ssdeep":"1536:VDlYuFlnEV/jxm+fjxm+Xjxm+lvgafd32EsP2U+If9o161N1b1x171O1V1j1I13I:VDDwhsGxAH9sysksls1sysPsEsas+sg","tlshash":"03c4c8e5a2e8a47fe212d7ecd52be818717e33fffad2d14446d18a1d79244c8182d8c9","dom_hash":"domhashaa5d03cfccd359fb702c277f7f9c55c8","first_seen":"2026-09-19T06:47:33.113051Z","last_seen":"2026-09-19T06:47:33.113051Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xn--ranbet-cl8b.com/","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T06:47:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":2,"received_data":78961,"sent_data":1148,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-09-13T23:42:47.530174Z","alert_count":0,"request_count":1,"received_data":87088,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xn--ranbet-cl8b.com","ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":110,"request_count":110,"received_data":2141668,"sent_data":61893,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":4592,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","size":86603,"data":"","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-10-03T10:56:07.624344Z","times_seen":29188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/js/chunk-vendors.0b5fe90a.js","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"884916affedad2fe505649fd99f1adef","sha1":"0eb3e410ba363f3711fa34323c576f16a9b5f855","sha256":"654135001a84dad6aa5c91cd6f74964d059102154961fcd11be0d8d9c3337f5e","sha512":"3c0e8851026723994071d9c276fd7d0de76367c740ea6b7f216d169781438d24e9cd89cae71f30de6d0949b21a82e6508f94af2ab838ca74bf77e44ec8907491","ssdeep":"6144:w0HUeejyU4DP9CBO7rY2zsLp9NxInKgcnSHlIBYgq:w00eejyU4DPFrqpXCKgcnSHlIBbq","tlshash":"a8c42a997381f45237ebc1eda07b44caf37a3688ac198654f17ea4f6693454da023f38","size":543247,"data":"","first_seen":"2026-09-19T06:47:33.28419Z","last_seen":"2026-09-19T06:52:10.062078Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/js/app.2be73c23.js","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"227ae684499468401e121a87f1b652b3","sha1":"d20e29a19190a1bf6162a247fdfc7d4c65eeabdd","sha256":"b81e9ab15c538ef3865bd9936acbb3995f708106a9594cda1badac634d7e1dad","sha512":"5d472af293dfcc5383fa097f826d121b0157cabda74021c2698fd8871cd5e562ffc5c584ee9462bbd845b924d2ea911cb4ef5a44ef625c784e614d20db360dec","ssdeep":"1536:Jl/2EsPnFInE6jxm+QvgP6qlGdlmIZUuvTha6X21SritDsW+WZVL1pomEClKxrSB:LsURmJADssSvoeszgtgf","tlshash":"e7543be0a3a8a4fee211c3ece917a814322d32fffad5c1b456d54e1da9304d9581fac5","size":304035,"data":"","first_seen":"2026-09-19T06:47:33.200801Z","last_seen":"2026-09-19T06:52:10.100298Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/12.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.984Z","timestamp":1789800414984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/12.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"2f3c-659d326fd3b7d\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hzZ%2Fd%2FdG2W7iKTsiiE6kbT0fHRArJNyqB1AFRjfD26ePhdJPj0LLAtrVVF6jtx21Ym5OUXcdNG9yCjKlffHGYWDnCKu8wz%2B5E9neBF%2BfjNvmNMRpEQJXzuFaQh0YcnLZtMiguxT\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1a838c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12092,"size_decoded":12791,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed8466b3c6e0ce84365fe7fb28b36167","sha1":"c197992893bd4bb4d00985f87458168e690b75a7","sha256":"44edb349ff89addfb12babaa6e285a1ac1b462d4ffc283006bb0ef4c8a3e6659","sha512":"37e7a4624c074ebc5441819e490dc451b4eb76733b5827a68bad9b748cc25ddc7036c8c4e383094cb0b509c8da248baeb4c1b5012368e81b374f29d4ce38d854","ssdeep":"192:v0cJGi0PnMwJXJ5yU+hpx+Uj+VR24o3HJYrp0SmzZEWlceX3j5TqxS0KlQqE71o:v0cJj6lJ5i//Ao3HaGdzaWll5GxStlOC","tlshash":"7d42d015b1a29c478cb26930665b6df36421f4d22bb72ff0e1460aff8d85cdc6890762","first_seen":"2026-07-17T10:04:37.463393Z","last_seen":"2026-09-19T06:52:10.073994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/9.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.703Z","timestamp":1789800414703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/9.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"31c-659d326e96550\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLYO%2FIbngfrnw9Y%2Fyqee9rPijdjk9CWWxVz7IPXkgo3BkRrh7TD1NTJ0dTu8PduVUMi1AnmBwRtpE%2BDUi1I%2BtnrQske8RzVvVz7nsy2eV4hfb1fYLo9hqXJ%2BeuDztT9dw%2Bgy%2FaDA\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe803c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":1133,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2eb04e3c17a036ea85cd40445b0429e7","sha1":"74af578a75497aaf524cfd1b7b9244295949609f","sha256":"617e1974f852dd92307d0f4b9021c2366ce8e827e4c1595139927562663c86b7","sha512":"6664b4c0abbb186f5ba36ee2d4f9e889111b5493d90472ad97ed21d9611688adcc18c2d4a6bf107a550820ec3d552a4ce6f1bcf24778aac17a60509f0ccad38f","ssdeep":"","tlshash":"a601c966a1bd958f4a2867a4071e242408aa74ed8307c483eac03a26663f279cbd41c4","first_seen":"2026-05-23T18:17:58.446582Z","last_seen":"2026-09-19T06:52:10.096163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":5838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/3.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.694Z","timestamp":1789800414694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/3.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"210-659d326da78f5\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKAoF%2BraLGg5F1bWYQY9aBb%2BU7cYgj8FTPrzklSAu7QMdIL60U%2FzdwvXmYA%2FDMJPHeoOQ2efskdsdR9nYcX7K4LkGe%2BtYpJo8Vv%2FP8yqicbnymURIabV5if6HDKs0RkOpr5WQ%2BB2\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfdffdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":978,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18708d3e3f54116e2ea639fdd56dd6c5","sha1":"44ebb67fb9dfdad6fca084c0e14664ce0336547e","sha256":"c04105233b339af2c50fb99dd7ad33b5972ed58c48ff26c4ea2120fedc52ce19","sha512":"be845835d88146d794573785c81335c15ee837d930d6e191da7713ac84b3658c129160f22f5a396dbd5f59b88463918a3463ae1c8baf170dbfdf773f1cb9fccc","ssdeep":"","tlshash":"adf08be859287454a82f1ffcd67ca8e330a371f40b3d0ce9b1801512e94995b5ce2784","first_seen":"2023-04-26T17:00:46Z","last_seen":"2026-10-09T21:02:32.262127Z","times_seen":280,"resource_available":false,"data":null}},"time_used":5396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/7.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.665Z","timestamp":1789800414665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/7.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:57 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1e25-659d32792e464\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Woh0iiPpdH4OunN7vaQKFGDFRHwHwf%2BcoIhnRODUO%2Fr2hQTHn6if37CduIR6hK0f1%2F64rnJddyOFqyLVGrKsHzLEJ8YuoaO6YDJ7fN%2B57HR4EUOQRDl63mQFO%2BmZ3J5jucDuUgGO\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafddc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7717,"size_decoded":3890,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b822ede2862b781d40222101e644bcf","sha1":"2a740ee454c79a5c64f43063618fb4be26e41d0b","sha256":"04b48e1b34befc41b8060d8e875e81cea6aede0cede87f1bbf3598bd867a7e6d","sha512":"944c03b808bd48ba002766f08cb7579e618f80b360990387e22b89afffa77b4de2301023f1ba4a761fc4fb00b3fcff7fbd86238ade246604ce11e4767fefaf73","ssdeep":"192:OExskBYY7azmh+XWyrgkuFkgb1+yRjZ6WTlYwQj6A:OEpB5A4Fk6+yRjsqrQjx","tlshash":"e1f1c5c83bbda3f09000f7e98f8654767a5710f9be469a51c398bd8ab88041d9de8cc5","first_seen":"2025-04-30T09:04:53.169422Z","last_seen":"2026-10-13T06:04:53.810863Z","times_seen":259,"resource_available":false,"data":null}},"time_used":2844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/licensed.png","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.709Z","timestamp":1789800414709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/licensed.png HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:35 GMT\r\netag: \"93cb-659d31b87360c\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1P6eZzjWz52LJUY%2FftmN2%2FdvZuuDIZxZ66rDM5ETX97N%2BFTYCjQVLh0Ak%2FUXnq3mX2fachifgtMQh4d80pCfR5cYMRmh5gkmq45Ss%2FhsyQCL%2BRLtl4iE5D%2BL70rxjy4bd%2BN0u3R\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cff806c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37835\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37835,"size_decoded":38541,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"185db1882ffd89d11ab26f19882205bd","sha1":"910166ebd48da05785dd005dbc58553908e27778","sha256":"af98db880f278dc3221880239fe6db0207080aa5e1c555e40ea92132a9faf150","sha512":"ebeaa8253de126d62e8af226c99c41c0e6ba84703218a6a64ee3d030b64a11da9f0db0a204873638bfd059072caf94be446b6e0f7c6dd935042f53f8e6a182c4","ssdeep":"768:sGG/wPm8qec1Iv1+A5dmLSwfi78P67COavPxxjCV5zjvqA+J:sGGV8qec6v3ruSwfDOav5AXzTql","tlshash":"9e03f160ee801959bd0e3d61ed8a5e5f999e1147f0172b0e692ff8494f40638e83e6e8","first_seen":"2025-07-30T11:34:20.370595Z","last_seen":"2026-09-19T06:52:10.083321Z","times_seen":119,"resource_available":false,"data":null}},"time_used":5761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5610,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/29.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.020Z","timestamp":1789800415020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/29.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:50 GMT\r\netag: \"3532-659d3272a1be4\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2F2K4Iqx6myONKIHVO1GWKt0%2BCmjfCB4nbpnaLdZMMzPfpBCAo%2FTWnbKuXDwK0musbgbyEqLBmYaRqKqohcoMf9vk0cL%2FacVHOIB3N%2B%2FP%2FjffxrYLx49JQhDod0kHF80AQVr61Ek\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1e855c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13618,"size_decoded":14323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0df02308004ed5e1a0d3683b323749d","sha1":"d219136d3be577cceb5c215dbe685bacc91acaaf","sha256":"9619267cfe32aa591faead731bdc829291624712b770a3cddd8cb2a11a17b769","sha512":"005309fea8316d99c0ae02dcf86f826fc915ffe25ece7772b30e71283e6becf0a2a03d7ef08d087e4f80024d18c4167ac39f7ef08cba3f222fea73cfc1ef1141","ssdeep":"192:TVOC6+A6IMJpPdMnvbuHcOAARU8k+gi4Eixd7QnYzdmyDUh8b3VSPTZz0aXk84XR:Ro+vlmnvb9OBuSJ4Esd7QUdb3VmRE1XR","tlshash":"9a52c08c802d8416c4c7a39e0eb35b2ba1b68da27f40a08bc0d3e7f646834711750777","first_seen":"2026-07-17T10:04:37.464305Z","last_seen":"2026-09-19T06:52:10.110288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T06:46:52.650Z","timestamp":1789800412650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0zIFTa58kurmG6Nz%2FnYQuvWsy57ZIRuSj%2B4ZW8X2fvapSJTxwi5kA%2Bc%2F%2FnY806%2BSX%2BY8teSZunmdT5zJigRlpwB%2B2SYUFifiAhuPhnsgibPd3wLA5HDh5uyjdMkVXZR4L8YiGWp\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2c35e08c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":839,"size_decoded":1113,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (839), with no line terminators","md5":"52347b9094f9a50ba392da2c1188afb5","sha1":"06eb73a067c4feccb0d8df59c2c84615d0e6fd9b","sha256":"4c36f469c6fc3a5f5211902d63e93b2ba69c14925882053bd8a450979d781787","sha512":"9da64657dac5165588c5bfdaaa70ef02d55950a82434a202af645c57e7123a1c4c61602d763d8a6e5b5f70638cc5607a2a214107e74d37e497261311011bdc86","ssdeep":"","tlshash":"21011e96cc20c18d53601b96ad70b36de88aaa0c4ea0a8e072e6c1ae09e0fd58a16904","first_seen":"2026-09-19T06:47:33.123047Z","last_seen":"2026-09-19T06:52:10.115967Z","times_seen":2,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":24,"connect":18,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/10.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.669Z","timestamp":1789800414669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/10.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3c3d-659d3277438bf\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4cDEh6O9PhNtLNcY6IBYbGIt7i8K9FFuuLKIk3RGETJ2BxgyspWC%2BRnAxD%2FcC5g3yMAk0uPJwzlrgYcr0RzughXjtI2NT9KhJKrpCQFR4E8bteSTSi9Oy5XP3Uf32DmDnXKC2O%2F\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfe5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15421,"size_decoded":6984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ad83e4e96b05b921a00f285cfa1ff9e","sha1":"ffaef38d0771c091eb364df50b82d6e6f69dabb9","sha256":"eb3ef442a5b5ef0707c6503f98b9050cb351ae793b098e2dbf2bd605a2928682","sha512":"ca989c8af156d92f6b95f969573678f8844923f6394301536e2f8bf9f8c8514efd596a7ba79ed44b6d6386fcb7c6dd3884aff4af98bcd93018dae6b8a1256eaf","ssdeep":"192:EixbyGvX2zMXOSOex300GkXj0Xq39vLocglomwW1AnytsFAg76mv66QDbyR8fTJ:rU0OexE0Hj06NkdomvAytqlWRbyA","tlshash":"ae62a6cd3b358fb8f481f1feca0384a4794598e6794395a5c3d06e1fb4424a48e5aceb","first_seen":"2024-09-11T15:26:51Z","last_seen":"2026-10-14T13:22:12.329818Z","times_seen":390,"resource_available":false,"data":null}},"time_used":5009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4860,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/1.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.965Z","timestamp":1789800414965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/1.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"59ce-659d326f80b5a\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwuVqOcoKzmr5y9R2%2BdzB%2FSVBMKCQXR1og4nnDm%2FqSozAQJhU%2BdeT0YehhJHHWUalnRQkufB4MpqC5h6lXgmNJygbMpQ6BkghPeUj58EKj%2BxW4JceBifLrDk2y73FfhK%2FP4IKxzC\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1882ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22990,"size_decoded":23693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"219f6c5e2bda466cea27aa7634ac8397","sha1":"ff4aacc231cdea1d4ccb8e4917a704309ce2d827","sha256":"f1ea04d087f448429f2a9de637f72bf2850f996841cddae3cdfa747449dbf479","sha512":"878ac9458ec3468e8da0423efdd7ec2f16fe5a2c66e879426b7a8f196dd4a2c66030e14922e70ea268103c98c0940161a4631103a94578e050033c5522b9bbdc","ssdeep":"384:zFfI5PdrQqkx0qGm1dhTfHnXjeEqKIQ0oJIKFUFFGdexJ8FKFW67SKNcAdOycl:zFf2aqUFGWhTfUZoJI9udQICLcA0","tlshash":"b2a2e15039f8e565c7799ce4edc46a4424fac5f98f8d07e05bb6bb099c603e8b0b9803","first_seen":"2025-12-30T14:55:49.03994Z","last_seen":"2026-09-19T06:52:10.109702Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5586,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/14.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.002Z","timestamp":1789800415002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/14.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"2b6a-659d327023cc1\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4s3BwQ2RenmspTzkW3wj%2FEXn1Vb8%2F5hU1CRsan6fVqHzbi7bNFqI7KsB%2Bqv4sqi1hYOYKiNobdIUVHqb3Y7KIjbgl63aUVJN3FsMgRJ7cOPdKrKBlbT2hoxnUP0dFQ9nOATbMVVm\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1c843c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11114,"size_decoded":11811,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"758d9993538191157e48289ba49f6bbc","sha1":"f308c8ce670cba0ce061e3fb1d4c5a7bc568ab64","sha256":"7b751c65ea6c565d1e2642214ab72b88dc1321d723e6b877f8729a0b75e48078","sha512":"39f77bccc98f6547c61dd7ae1fcb3aea07e779e7dfd009d7c8dfb21a9126559f038a19a8d2a2ea23d466c67908b950d3c110f05a7f54bf4a28903756b2cab165","ssdeep":"192:Yd4XOp9S48GnP2J0W5yHofnjk4oWzmjglNusAw7O+jVqgeiP9AXClh7s4GJs:2pI9GhW8HovjkzWitTcVqg3e4GO","tlshash":"7b32bfd1562e280275d201d1a481fb6c76abcb6c0a1d232f63475fa6754c3b1e782937","first_seen":"2026-07-17T10:04:37.500418Z","last_seen":"2026-09-19T06:52:10.096888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/19.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.011Z","timestamp":1789800415011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/19.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"4350-659d327109893\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emDLyyCfQZNzBG%2BgN%2F0MblQhykydDfUbOOxoXhqF7lgHh%2F3QC7PQAKraTQmvPOltFP40hzvfptKcd0MfeisCmJDxtP4T49B443PPlcl67UP6MI7SF51yJXkiSlaU48lQnkN0WKn8\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d84ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17232,"size_decoded":17929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b6ae6d9966f7757253391969d0c635","sha1":"29690fa977fb4156cf9d9e9c64be323aa1e6dd04","sha256":"14871fac298d1209d96bf3c36cc32baf60c2ecb7d3f58aeaa68514f4f8ac79db","sha512":"aabf395200a2f247724aa302f2f1628f35ecd685230d84fafeefe86a74a0efbb5b984429e588376e60f614406b900091442ffb2da65ba2ef8bc6a9bef4f5b600","ssdeep":"384:sgr5Xe1lF2jFkSBTn2YhUAfw9gpNN8prm68aJw1xI2QfUNHKk0:sq5WlFmhxjOWEvjJg+aL0","tlshash":"e972d145aed317ad10a4c5642f12b080288673814d87ecbbb77248f79d866d7b9cdbc6","first_seen":"2026-07-17T10:04:37.428477Z","last_seen":"2026-09-19T06:52:10.111376Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5551,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/1.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.031Z","timestamp":1789800415031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/1.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:52 GMT\r\netag: \"26ea-659d32751d3f7\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKfgDUapEirgiZ6YSzQT1UXyLz0Ep%2FjVTUmZafIBkcbA%2BE3Jc%2FRyMsJdkObLFvi5WGduMgjjuTbgH2hYYxnzN7WuvQh%2Bf7Oq6a64p8nd9zK7WjZ%2BSxydWRPrtFJSMOxisfSr97nR\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9962,"size_decoded":10662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c9a0003dd8306452b23e166ce7a33ce","sha1":"bd4b662eafacb038bf4735b57b4cf2d0d5a4b59a","sha256":"0736482ef7d31b71dd69e8dd96679a1a8d0675973382e953efd6a2bfa2ca195a","sha512":"bcdfa6402bb342c62519fbb5ba780cb0f0183d30912890acdea4904080075a4e1c8a3dc943f792e4195a3bb1ecc0ae6a2cde17359890e014e0b50e13ddc931ca","ssdeep":"192:CMCGhVyrDlWrKdhyTT5wI/HT60LLJ35PyGci/nc0fHG/SQczWiJZ7XX:SGh2DlWuT0m8JJPznc7XcKir7H","tlshash":"4b22bf2fb9954a215f27da2093c51cf131a070cfbc69ca6dc520c4adc9a4b52b53a1f9","first_seen":"2026-07-17T10:04:37.545614Z","last_seen":"2026-09-19T06:52:10.099319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/11.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.051Z","timestamp":1789800415051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/11.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"1164-659d327b08668\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFoTT04MSvtNeFPvUWRNM9G9i2l51m3fK0FSgDhyLI%2F474sHfk6EMGWv4Mr%2FzaTXWjOhGDDee%2FS7JseGkwO18jNizwCdZhJHx6b3jYSDDtrv0cEhwbgnpf7qT%2BgksPBCrz1TbKhP\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d21871c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4452,"size_decoded":5150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc1bba987a9dfe7f7f953daa7622baa2","sha1":"0d7e6fe54da86584e779a22e3c68823a8c1c93e8","sha256":"269b49d13fc6cc6889fd68704a1505eb89bac083dac71eeb73d60029ba691a1e","sha512":"19a35a42f72ae9e452c1dee20bab9f8600467bb410456907c5b2cf4fd4d2209d9b97a435909041e7c8d84b2a4f5ee00efa9f1d6b1812cc1218acac6c99ebe991","ssdeep":"96:7fFZWH7nIu0LDD0SL5muIntzlIC/tSWOey+AkB3ff1WvMXC71sXu:7fbYkHNm17ICfOey+AkBvQvMX0sXu","tlshash":"8c917deda0250ed944dcd4684c056f4ab4a35430438ba7ace24788793ebe4536eeba0f","first_seen":"2026-06-14T08:39:52.598907Z","last_seen":"2026-09-19T06:52:10.078664Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/8.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.702Z","timestamp":1789800414702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/8.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2d6-659d326e4ecc5\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9EjKsouHtPlTxAd4nqS8MEc4M8gSEBkt5EEp234gq0exWJ39jmAX0KSphsNp7j1tYi2BPf59iFZVuc1mhMZGvChsTXIn6RjE0BPqUQCgeW3mel0WzEB3w0yics5aYta5rgaDoV8\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe802c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":1107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13b13c1a1b195dab89321ff24bc13c34","sha1":"f37db98d63141e36d89003b216f9b246bcb3e0a2","sha256":"8bc5a76264060aaf57221f5f32cb4367d59b9de8878dd4a26fc119a4ae72282b","sha512":"567b781f208c8a0813d37e9c937d5f10acca6334d7f35658b1a124d4ef577dffc1f18224881547d65e793995c093283de41b905da916de1bde6b271657db45c0","ssdeep":"","tlshash":"9801cbf032a8a2aa8409ab19121732207552e4f6bf1c844122d16e383c1b0ef7f6c9da","first_seen":"2026-07-15T07:59:04.378468Z","last_seen":"2026-09-19T06:52:10.08265Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/28.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.978Z","timestamp":1789800414978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/28.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:50 GMT\r\netag: \"297a-659d32729e91c\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQMvakr3iMtBPPhsXuB5crj74LO00asaO8LCB4mVlYoLIKG3R%2Fqzu8dL3T6eYb37KqMY%2B9C5J5xObmrupWKLd%2FgtuANaWqHV220Z2bpa5DTINm5I5CfvZcPuOMW7Yvzt9sQYmOs%2B\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d19834c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10618,"size_decoded":11317,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5d50804a2aa82076a84ab4f83b2273a","sha1":"4e97a52cdf2a40e176db67be5bc4763c7d4e8a3d","sha256":"d60af0fe255c12e0f18f8dee0cee1fd052345b7fe48be1d108cad0a9911d3617","sha512":"688be853fe46aee60451b06d763b54aaf1bc86d3cdb1079970b3d4306466cb7ee4a02efbf8f5773ae5ee8e1230ecb2768bc69e8b06a98f7fe82f81e5aa6918cf","ssdeep":"192:zGq9Xh0HJVT4pJZqPzDy1vFl8Lksez3QO1tCv/2bCH4pkJ02uXw75sZOT9MzV:z19Xun62LW9Ys3QkF7pkJXbcOhGV","tlshash":"b822c0014ced5c2085c328139665930f71646bd4f7491c1e728af28efc5e4a6d29fdae","first_seen":"2026-07-17T10:04:37.487137Z","last_seen":"2026-09-19T06:52:10.114121Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5570,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/16.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.008Z","timestamp":1789800415008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/16.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"2e9a-659d327073634\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASCzPVRcsdhuhQejOjnDl8bIeo%2FKutNRA6jr8vquL7%2BJlVJCHyUbJaNtbsd7rn%2BrUI7OLiOcAWGmxV5CylAhG%2B5sdITyojDjjJXdR0X45BWYgV%2FtcoCcytSr2K2YOWdGSSQpc3iV\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1c846c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11930,"size_decoded":12631,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13363baf0c8d0928a35df03a5cd0f94e","sha1":"050ee224786680f27b4ab3c77520e332f04a7e81","sha256":"1161a43d5daa429bbe26f54c99bafe43c69797b90817e61d800ea939567fcb83","sha512":"8df5a2e857f5f0e06542185766ce787eed90892b9334511bc242a421bca0082f7e6f29827416bfd1dfc98db520a78d0b9ee3c4e24539b79670c216344c560287","ssdeep":"192:6iHgLE4tUZwSzKbqJmbuUhPZAKKc4o2Tuhm4v2+H3y/PouX4ia6sba9kj076A8Ra:PHwE46GSzKb3buOWBWhm4uAyAuoia6sG","tlshash":"4c32d032f813355b8652ddd8679e0c969301f46c914b6784c063bcf91f51b7a6b35883","first_seen":"2026-07-17T10:04:37.538585Z","last_seen":"2026-09-19T06:52:10.104285Z","times_seen":3,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/24.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.018Z","timestamp":1789800415018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/24.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"3752-659d3271fafe5\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53ahyRVYD0GBkJQACVRBEKwINiLILwJJKjDFELNh0bBJM9I2DzXjZPZDE5OXJihJ2thqCjeEk9FaHAYpxSt2k1VgyAJlvYV%2BfR%2B%2BkFjdDcG16stXIdnUpQubHzY2n%2BUClbzErHks\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d851c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14162,"size_decoded":14861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b30bb5f4aef44f6e884f67209708298d","sha1":"adf26699e7dabd82273fd987497bed39f9f3146b","sha256":"1aef2b073c4dccea8ec5d13936f57aed7580f4ec1ac0ad54c69ea046170ab85a","sha512":"81883207541647625c18befae1cbc14fd9f792e12c6ca841dc9cc30d015872fe568f109e9914a2420b10c062ee4ed85501a7b0dcd89014d80537b19ddcd553c1","ssdeep":"384:NqUtolo+Igy6a54d+8g8BRQ0swC71XEsMHLh6J:0voKy6a54d/g8BEww1XRu6J","tlshash":"7352cf5ec85fe4063cb49406c2db547b793a9449099dcd538cfbe060d4cf08e6a61e4b","first_seen":"2026-07-17T10:04:37.552194Z","last_seen":"2026-09-19T06:52:10.063862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/3.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.046Z","timestamp":1789800415046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/3.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"13da-659d327bfc4ca\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aovRvCZrS5ys%2FCjlN9Yqe1smdg6ErFM4ftd3IFxk084%2FETjjNIQewYmOYp9fb3PT2CP1wQoh2Yo%2FVlZlQS85BJK%2BNYXdY5v16rY13YSd7W5V43Rg5SivWfavHRGdWHobNXJJT5Pq\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d2086cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5082\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5082,"size_decoded":5780,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"029c037ea92daff730a114afd84881cf","sha1":"f2fbcf9010757f99a59a0e2b6401a79c779acbf2","sha256":"008c0d5331682e810894cfb824376243a068a57bc0001b3913e07cb4f8c30a7e","sha512":"0c17381d3d1fc57fcf008f5eb5739db3474af1541fafe6c418f586259528ffd2ef27ddea6a6aa13d6ad989014aac9c7a441d3dc21d0bbf5a471a63e38cd9dd4e","ssdeep":"96:xPuwbUvjWNM7wiXA3lcQ+v4JA2fOjM8LMpFZddBKvPIRH8958e2za:xQWMMiSlcQ3ARjMqsoIRHo8eQa","tlshash":"50a18c4bd270859319d9af42ab43736ad9374cce71e0548b3663af31ca4a52204cb9fe","first_seen":"2026-06-14T08:39:52.377879Z","last_seen":"2026-09-19T06:52:10.085317Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/6.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.664Z","timestamp":1789800414664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/6.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:56 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"35b1-659d32792ec34\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6EF83OTgXDhwNkwQkcWTORTYk%2FZWLoHawx7FMO47TaiFzFYMqBWMB2Yj0QQGQ52ZamA%2Bg1Y5yRVSfqmfP%2F8fpxjXEORIHaKtMhCC7Mk2NjDlroM1IhDy3g4bnGgujwqPExytLVj\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafdcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13745,"size_decoded":6599,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec4347ed5373bf44776c09c3b1328330","sha1":"0dad0e80f13b35a544fd607b205af40c26673de0","sha256":"39d90cc08856400cc60f8b465d659ff5c0181cab7b9ece48b42898fdefab5e65","sha512":"c7315707b6386fd0ecb67581bf2cba3e68e1851c63d5116aa6c6a43aecbd253c92be96bf093a5269e10740f0b14c3650f19e05ed72ff76b26f08c38a1b7ec6d8","ssdeep":"192:n1C0Z78U1zqAvmWE8HPZd9cCnSywq7UoajsQWwCwT9rrwxSrd+zq8t3rOGQGkab3:1tIYvvTvZ7cCnSIUoVuOSYGS3rOGY6KU","tlshash":"d15260a833b6f3b8f44bb2e8c23655d9ff0928e57388d675c3602e55810305d99d98aa","first_seen":"2024-08-20T03:26:36.733411Z","last_seen":"2026-10-14T13:22:11.586877Z","times_seen":200,"resource_available":false,"data":null}},"time_used":1837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/14.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.674Z","timestamp":1789800414674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/14.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"28ca-659d3277e6a26\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkWOK4k9Ogr7BcCxqfLJczyrsT1EJvU0glV1S48Vw83NVqNtHtMUXCIISCyqew%2B5IwnoH6JVuXaDPMxqGRnb3guyD3WIemb7b9nVEcMLCjkZwvT6lpTIv%2FZRTTDPFUVfiGbAgrSl\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfe9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10442,"size_decoded":4884,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99dcb301ffdc7581ed9986db8b444f39","sha1":"7a6aa9b609c6a545571a058988d24462af4f80a2","sha256":"248e6c029c8a00016451a2ea65b7e7c76dd155c1d1be42553c0fc49f957d73ef","sha512":"a0e5eecb467061204b5d55e505435109fdfd4e990e87e8a12ed0a2ec167a3266bdc250c5c60a5ef38ecc00e9671fabdbc43b46265937c1a3be0f6f4dc71bce55","ssdeep":"192:XrbzSW5+IeS0BL2RqYtong8xSqh4Jx/kCpN9lPxn:X3P+IeS0BwtoZxSi47v5n","tlshash":"0122a5ed6fa54af0e481e3f9922200a5391b18fe2e92d775c3ae2e15f51284ddc45cc3","first_seen":"2025-03-06T03:57:53.453679Z","last_seen":"2026-10-13T06:04:53.546937Z","times_seen":246,"resource_available":false,"data":null}},"time_used":3844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/support-bottom.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.680Z","timestamp":1789800414680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/support-bottom.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c90-659d31b9a73e1\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uINS1iJs%2FXQW5nGWSc%2BQLC7qQILyB%2FSGSv5qnv1J8U775wUrBV3m4BPcWesKSKTXk0JDx0ZSS3UYrJO1Luc2guWEk%2FRr9NJD4hEz746ro7UG%2FTUCr80SBUYVTZZnzL1RM7aaUY4x\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcfeec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3216,"size_decoded":1768,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c983a8f573d1a28d6dd5af03f2051ef2","sha1":"d0a3ef1b695966a6fd39a665d243bb9fad9855b3","sha256":"816f61fcefd6023b598ad11b88fdae2c61cb3c25adcd078cd39288689ee570d5","sha512":"ba2cdbd92b32ca5ac3e8ae6569b2eb6a482ce7709c6930305e3684d3b6635f78943afde8d9059f253240db6df7bd5ab4f32b5ceccf99fa2000969ca6ff385c66","ssdeep":"","tlshash":"616112baa35d9c73d758d7f8db458469225880e3ddc2c2b4c2a86f1f38a80c65d2e9c1","first_seen":"2026-07-17T10:04:37.438387Z","last_seen":"2026-09-19T06:52:10.070257Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/10.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.705Z","timestamp":1789800414705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/10.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"42c4-659d326d0f36f\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr8n3txslYOKQRJlnwp5IaExXwZ21muP5X2kHWNozadyneZpySEWUYjTq0mWO2Fs1t6U4TFRccxxA4cCn68YDdIo8MfD27aLY0yFnVvTSEmxVkJuf9PFMOI%2FLdqBE3t4dVNtrb8p\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe804c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17092,"size_decoded":6561,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c426a840fadf681b3fed9d5b34372017","sha1":"6594f576b76623474efb5a2d5091224263d11d01","sha256":"109bfb014c7d62fd7046c4945297479b410ae25fb135b58bfe1d0ef9837c5fde","sha512":"967edb79890f63f37d7324af783597844d4e28a1c16a1c0de7454d0cfd6cd9144d15e5f12ba92017eaecc45aa6e3d072bff98bf9c27a6911b77990bd48ef4258","ssdeep":"192:9uLwvn45DGIqGW3XdjDtVdeHRXgxHXVFhf5oqpsTQQY7y+fflfISuajWXOTyXbS6:9GrGIJIXd3Pl3fsTQr7xOO9+rS6","tlshash":"047265e9e3e4f2f0d50af7f4d521a969765b24bb3f26db0843e59dd4e60601e88c8c50","first_seen":"2026-07-15T07:59:04.357016Z","last_seen":"2026-09-19T06:52:10.05835Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4828,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/26.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.009Z","timestamp":1789800415009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/26.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"395c-659d32724cc80\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHdjYfnqCtaK%2FgSDulMYjfmfuE4iWa9YVYs7j5XIC%2FSrTUw%2BflAStnK7v5oP94lnLdPvU%2BsyrIDh10C6XBWKkyPOldKoe1vgFZSscWyQ7gyy5IyOqDVLCMrJ31xPlvPLcoYOX5Pm\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d847c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14684,"size_decoded":15383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d355a59fa32dd6d15f3b831a4dbd524d","sha1":"44402ec5c658ee669935b69ee0a1912d7128c107","sha256":"ee094492cf43189fb9ab59a1f51dd1f7480980f51e9e5a55c4b4425fe329be04","sha512":"6f6d77c54d9f7afac32d45e6c50436d80ef89d766dfb7d95d58c443d99aa3afb83f127988c1c59cd919e4632f984b453a4b0585fce21d667f268738ba2dc9777","ssdeep":"384:uBbYizVM/iMY1Og62ICh50ZjOaVnw7JME/yUr0Zp4nuRoeBs9loX:WbYizVMKx62I65cCao8SecuRxswX","tlshash":"9b62c06fd0cd42a1f5d95e3925d62a88d21935aef8847acd1368537bef00dd9c9ca1c0","first_seen":"2026-07-17T10:04:37.498944Z","last_seen":"2026-09-19T06:52:10.08854Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5566,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/1.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.053Z","timestamp":1789800415053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/1.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:58 GMT\r\netag: \"faa-659d327ab813d\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cw4jmO80CkMqQrfwJrAk0ReG6OSXjPAyAQ3ux23tKb%2BS12FWs9%2F5p67Td1oJG9ELn7qv9mJrQm5I9c7%2FJAmUmRXgbmtbfgkyL6RJrB17pBB0r186ypr%2FbsOyTUfitnjMbjmVmfdA\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d21873c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4010,"size_decoded":4707,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"741cfe68aa0d61a68ccbde853a105cb6","sha1":"a31130d9a3e3697688543143747cfbbb404d879d","sha256":"de18feb939734bfcf3ec3a02d29493534d71f9dc3094287cb17ac004db47b117","sha512":"456d1e983a4dcac74b1d3684fafccc4421bb4aa4552fdadaab2e48f175d39846288d174687e11f086b876cc0324b4de5e04592896ef722e5ecc654734d9e0754","ssdeep":"","tlshash":"a2818e0348f748b1e67e95a84eb5ea8f10888b728204c7ca4919109adee99f4c2d2357","first_seen":"2026-06-14T08:39:52.553339Z","last_seen":"2026-09-19T06:52:10.091392Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/support-back.d96dcaa2.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.725Z","timestamp":1789800414725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/support-back.d96dcaa2.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/css/app.861dc22e.css\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:36 GMT\r\netag: \"1348e-659d31b95823e\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5woneDNITjvsjJhSpmdlptIy9YIlNp1u%2F5SKfU3mW3MYygF3NbDbi6RESVivjOgzEFcZ7TLtVqhXRSi4R4GLUDR3eq%2BlD2sNrG%2FzmQRFSZxkwAtbGViIyn%2FjztKbDxxzMRUp3m3j\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d0080ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78990,"size_decoded":79690,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f12ddea165b35c884b506ed8ee4b2d4","sha1":"31236c06cefe1eb600c8d1efe2f0f6750c138216","sha256":"175b0efc7a6b734e71a0547862fe3d0a85e74717b4415a4422e79770cd287e14","sha512":"cd45850de582d82a17a9cedbaab33439ae262023e3a645a0a1f608b1c9ccf0ce15a3d0c9bfb211e671e9aa8173eba377e5f576e4fc21f9beafcdc3b027f9a005","ssdeep":"1536:5E3AbR88pL77tAk6/41DrPkjwtR4STZxGCCImZXnES7RsafsMdjK6:eeH7yk11vPkjs+JdedohdZ","tlshash":"c873021e363f1b8a87c206aec3911e446d1eb318e1df3d11de5e075586ab3a3b73a058","first_seen":"2025-12-01T11:28:00.263062Z","last_seen":"2026-09-19T06:52:10.081101Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5915,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5613,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/3.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.025Z","timestamp":1789800415025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/3.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"1f58-659d32756d153\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CV9vUo2wYFbbqLa71i0l91LUuDpgyiQEsr7zJAmfadCiMPFML46BWMzshisJWqP8fe5iv80ErdHNulK8pWINR5KL3dYJc6SRNL%2BCBPWtdpLxBcc9e6v%2BxKitHisnsSx6oJbASoM\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8024,"size_decoded":8718,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a51f667f08f0b880707f65cf68a1197e","sha1":"bb1ae032e08086dc93989ef069288ed4a066e7a8","sha256":"8815ddfe5542e385b8af5159786be6d4e9f18bdb50dc95aa1da10bf71af6c2ab","sha512":"f15e8eb5f61864b777f35974e0effad4c4bc6a12a2cc3f3008a24b208d027df72209aa928e309fd33c449855b582821bc0e0b5c244116b5fc69c335d85501c39","ssdeep":"192:rzmiLEg/Prtn6i61nv+KEXn9EvZsSKoXG7sb:vmiLEKrtn6i6RPE+JG7G","tlshash":"7af1ae2cb17a36a1f4e7688452883dcdb474d09ba29b2d32367b4795ec09fb2861851b","first_seen":"2026-07-17T10:04:37.513087Z","last_seen":"2026-09-19T06:52:10.084149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/6.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.042Z","timestamp":1789800415042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/6.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"1198-659d327c96d79\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFBY9QysXCLpIWZX1Qxg9Pi8RXjQO%2BL3p9sNspnJ5enYu5JABEJMUNE7W9FuQwqxet0%2FSpZ4ShMhN8SWRUE%2FpX1lzKyI8oV25IWqmNHl0b6a2MTft4bqxdbftH7NvyeDUo9K5KLz\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d20868c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4504,"size_decoded":5200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08ecd819a15b12e8d4a286ab0f466e2c","sha1":"a2d34e66c8d31e7a1a7c86cf35e50b1d093eca6e","sha256":"aeac2bea7b14449c0118874cf9f030f39eb45ea2ddb2deafb4d030a80d056bf0","sha512":"53331e7f693673e7248ff59ab9c2daff4d44af5b1c0fd690043b1aac39f27cbe77a5f0fa4cb05ede440795ce1cfb4eb34f3672177da5b87d40b75fafb6bcbbcc","ssdeep":"96:jQ3B4YdR9Cs7xdgHEPWqm3gJCsRP4tVH45LT0HRZBIQbTXZu:KB7us7xd0Em3ABRQttkTvQfZu","tlshash":"7e915b5a552eb6c06ae1ef0c2f5d0dc79809dca15c813a07c3c1694af6de27512ea8e3","first_seen":"2026-06-14T08:39:52.434383Z","last_seen":"2026-09-19T06:52:10.060784Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/9.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.005Z","timestamp":1789800415005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/9.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:51 GMT\r\netag: \"396a-659d3273e6f12\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7Vb3xzXqZT2ucgb%2BLDSRQoEnkwAQkLgO8E3XmCAyCES%2BYxAAmxK0A5Zk0gxT%2FCJzbNqAV4wwKaQ4xyrUFJ29pQZwmOD374y0a0ETX1BpOULsTxntOH3zBSQe%2F5jaXjy1cWP5tRs\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1c844c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14698\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14698,"size_decoded":15397,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b46afd85c748eb475c3253984dbe749","sha1":"57358b26a33eeda1dddd999468470035968e951a","sha256":"2d2a7260dc9ef70c8ce72aa2bf6bedac7719e8649803e9d3d8899a977cb9a753","sha512":"9819559062d880f056532efe2464567f9048aa4d9464c0e628e0a3eeb9c2007837d8b76a84b1b624331465cf4375fc14d18b98d31882dea683e175e73799f795","ssdeep":"384:tVlYHmBxjBzFC+hNO+ujHBW7Ue7IL9bgp9CzQy4VEwDnre:jlfxBznhN6TtgpEz54VFDre","tlshash":"5662c0c990654981b8ea607531b06213bc91e1ff647e6e7e398c410ad90f3ae601cbef","first_seen":"2026-07-17T10:04:37.519679Z","last_seen":"2026-09-19T06:52:10.054855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5551,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/css/app.861dc22e.css","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:53.419Z","timestamp":1789800413419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /css/app.861dc22e.css HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:41 GMT\r\netag: \"e187-659d32a3aec25-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9uVzBkNV5%2B%2BbJTUvzCwDHZ5KtzfggTi1QcOZbImu2QVfrM4USmeALAZAPdaHLtCHlUmzkME0jv5mYSHaWMhPNs%2F8GMamJ2D%2Fcad0%2BON256AZcL%2Br0OEUY98TuZ1wV2FVka1fymJ\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2c7ee80c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57735,"size_decoded":13420,"mime_type":"text/css","magic":"ASCII text, with very long lines (57735), with no line terminators","md5":"71c4b33d8549d662fb777428b42b55e9","sha1":"5f091186546eb744aea6359e5dad65f0abcb5f46","sha256":"5da3e43e16b7531a7ddf22be1d24b0b58e4eb3e75c61b6ca02e1bc68e6f2d51c","sha512":"05d7070627b652058474318c241044bd04d40f00907ea259a146e08988693371c62416a14f3360c00704ddba4abd814fe9aa835b941733f6c7276ff203ecb6a4","ssdeep":"768:N4xafwwL+VhrnrmkPvpIQ3RSudWcKRvLsYaRHdAnHuJbaPBlNHjKof7rxA:ehrzxThSudWcRH8A","tlshash":"7e43a634321e6128b977d05368a1ab8e7154f257c31b02dce896ba3d8ddb5433ab17ce","first_seen":"2026-09-19T06:47:33.177046Z","last_seen":"2026-09-19T06:52:10.072737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/2.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.693Z","timestamp":1789800414693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/2.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3bc-659d326d5f4b2\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4S927FpIUVKLPtYsj5XCUW2xTHpMjSsLGubWGh46jucGyhL80%2FyfAX8g%2BhxcQj7uPt0kj%2FoQfnC8AOcyDD5j7x8uYc2Xc2XAApb2S73F8pmBeEPincQ7AIkvrjDsNuL%2BMZYC%2FWZh\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfdffbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":1260,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e73cb1b222d746763a3d57ab92c94621","sha1":"5123d30407945bdb0d480562ef9c772355d3627f","sha256":"97b17effe940e91f0bd16f9bcb9816b304d7d12bbb192a0b33b6927944946458","sha512":"580fbc14a67558676750b29e5b5e7134dae452f3446862b7d7673a7e2c0802d3bd0e8062a26e945c39533eb5710ffd151f65cd2029d2a4ffb0dfec74314f27b3","ssdeep":"","tlshash":"181161de12749548a98f8d2cfb2bbc063012f1bcc52e9ce4aaae6c4870c2ae13110518","first_seen":"2023-04-15T18:12:28Z","last_seen":"2026-10-09T21:02:32.243058Z","times_seen":236,"resource_available":false,"data":null}},"time_used":4849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/21.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.992Z","timestamp":1789800414992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/21.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"2f64-659d3271641ce\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pM2NwU08Uy%2BsQ6FloOn4XX8G3ituUKIPUE%2BUihaMmF%2FuFU61QrTjGW4IOj19FVMnsf1aDKNjFHDhyccx7Mfvra1aJLybuD0oqbJTkAtskFL8YcN7Jg2QbP4ulfg8opRXIJVDaeK\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1b83fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12132,"size_decoded":12829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"85b894caa39dbd3f84f06b768dab4622","sha1":"b52084c12db1bc7118423ddea8e1ef2602cd5155","sha256":"7c92eecd156bec2f6c7f14843cdb7b56de56820d6e05428f6aa121e4369754b2","sha512":"ff0ed43604778bf9240d514dc83d55dfc374d181191b3c753b4f822dfd52668e0459dc587673f11f76eec719602129846e8ad3adcd98e2a7f4598b508afca0ef","ssdeep":"192:so+NxxoNPFvk6K8STZ1fnc5ayGH/r0q/6Ex/fpL2U4tDqMfgnxfaMj8pPcOAzXCG:D+NxxutSTZhncsydq3f12U4aaIXJLSC","tlshash":"e442cfc5d82a42ba05a0f6a580fdbd44dcdac2146587e8db34dda93fd00290866f7d7d","first_seen":"2026-07-17T10:04:37.444692Z","last_seen":"2026-09-19T06:52:10.103676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:53.722Z","timestamp":1789800413722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 06:46:53 GMT\r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":1321,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-10-05T20:34:08.863419Z","times_seen":89690,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/8.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.667Z","timestamp":1789800414667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/8.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:57 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"22fd-659d3279808cf\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GlovuS00Wmh6V8zArtDOiCJgXR24l0%2Fum74zoSRGl%2BUMR2q%2F%2FXNghtcEvfQoHwjeMaTbGxAYCQ%2BaHLue7wXQ1zXzPJn%2FQwNLeCQxZftkzXcRnC0jS0a0JSet94lf9fMMTsDy9Ewz\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafe1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8957,"size_decoded":4482,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b3c81da10a12f459c97496592d34f4a","sha1":"44406f03714c5e77a45aa82b296be9ef1bab88c0","sha256":"2170c0b421a69fa223f6160f0a8a5c72257c7a0e4b5611e7cd635ce3721c205d","sha512":"d0550d78da61b92fec4e730a77f75134b9614390270ad637a7e9c8795f3cb61ef2cee5b58ba43874ad61aa58cec3f91394274bf6e761d5d347ff0b96575ab86b","ssdeep":"192:mqz/SsDLsX0J3M96Cgl7n4KR8DUg/phIq1ZjkKnyvP51wG/uxGRqXVz:Ss8X0u6hl77pgDIq1Zbyv3uxL","tlshash":"2b0285dc637a92f8f801a3fd871794a579427cfb39418929c3a40d1978450ac9ec9deb","first_seen":"2025-04-10T04:11:56.94119Z","last_seen":"2026-10-14T13:22:12.245521Z","times_seen":353,"resource_available":false,"data":null}},"time_used":2838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/2.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.039Z","timestamp":1789800415039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/2.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"105c-659d327bf8e1a\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eK%2BdSdRDG4E8XKR0adjiEMF2BS43vllqf5GUjdzgw%2F3%2FY7Uydv8LTm4FdD%2FFj5AMXVaWsvJG3sSBbpjXF77YzITfyuCirqr7f%2B3G5aexLHDW5tinI7I84GuM%2Bf5N27e%2FF5ZofSt\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d20866c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4188,"size_decoded":4892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46ae386840a01396dc05f3f54456aece","sha1":"3f58edd64ae9501ad1ea7df6d7b76fb58953b969","sha256":"69a500a23b28f83932d16d2ee2e87f37784c68ff59cbeffebe32e633d12a40ae","sha512":"d3c4042d8dd3317f7a9d1d836244862fcbe1ae6ffdc8b2db506321e39dae459f0a5e145cf550a902ef7fbf86d823203e8bec75aee407a8240fca077bb49d9cce","ssdeep":"96:tJNMTAeuf3CQe8EkuYlvILUBoDnGkYDMBj+YyCX+d4m:tk0te8EIAg2Dh/jQCuim","tlshash":"87817dd6a5a9423adb95831e0108d371b5dac5c8b94fceb9c1a3fc48f3bb80c5b58145","first_seen":"2026-06-14T08:39:52.568569Z","last_seen":"2026-09-19T06:52:10.066221Z","times_seen":7,"resource_available":false,"data":null}},"time_used":5596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/js/app.2be73c23.js","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:53.416Z","timestamp":1789800413416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /js/app.2be73c23.js HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:02 GMT\r\netag: \"4a3a3-659d327e3d743-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BO0pIHGG%2FwTpY%2BdR4%2FC0SRKNs7S2mrEHfiK0zD%2F0eJAixWg8KlYKQjzq6imBn3UjHZXx0NwYJwHChJ8znWFAo7QEOmrrV9ne0m1kBVOuRmo2R0DKtPA0YourWRJjD9BXLvWHU8UM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2c7de7dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304035,"size_decoded":71700,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"227ae684499468401e121a87f1b652b3","sha1":"d20e29a19190a1bf6162a247fdfc7d4c65eeabdd","sha256":"b81e9ab15c538ef3865bd9936acbb3995f708106a9594cda1badac634d7e1dad","sha512":"5d472af293dfcc5383fa097f826d121b0157cabda74021c2698fd8871cd5e562ffc5c584ee9462bbd845b924d2ea911cb4ef5a44ef625c784e614d20db360dec","ssdeep":"1536:Jl/2EsPnFInE6jxm+QvgP6qlGdlmIZUuvTha6X21SritDsW+WZVL1pomEClKxrSB:LsURmJADssSvoeszgtgf","tlshash":"e7543be0a3a8a4fee211c3ece917a814322d32fffad5c1b456d54e1da9304d9581fac5","first_seen":"2026-09-19T06:47:33.200801Z","last_seen":"2026-09-19T06:52:10.100298Z","times_seen":2,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/favicon.png","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.379Z","timestamp":1789800414379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:24 GMT\r\netag: \"332-659d31aed10b2\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNSdHazxnZj%2FpESME5ED%2FXzvIwRrKfAnJsFq5jY94NvqKyBF4i%2FkKYQoDvwdR1mMD%2FhxJd3GakVxZKj144%2BlAS53kZPt%2BInhTMWPbDpDL9HzjJAm0exyAAnmmVLDrANiUOlQp2eD\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cdef29c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 818\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":818,"size_decoded":1520,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"262020c80b5f29d1fef35882111414fd","sha1":"9c5ff6ffa7953f6d81095742c1105deac98344f7","sha256":"7232c155bda66361862ad5963dd4e7aeeb6a4c097c5e9398f1853f4c93a6ccd9","sha512":"0c2ba225bf19e1b1aed92184e575ea5a612e2a043893a5ca36f06330b9d6c17d327b104f2aa0dec4331b22ccddc6c9f694adfd909b4bdb4a03b9d166563a4a7e","ssdeep":"","tlshash":"f30181fbaa1c89e6833a013f08adce9070be5a18782401d30c27466d2ea8150cacb70a","first_seen":"2025-12-01T11:28:00.225728Z","last_seen":"2026-09-19T06:52:10.092096Z","times_seen":34,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/4.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.661Z","timestamp":1789800414661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/4.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1db0-659d3278dc7c8\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igRe%2FZTyfehBRGA%2FmLJqzEQXxD2PWAiVreI2TbGa178RPFdgt48ZYvkeW7Fe5smhmwbunCdQtSRSGrrsP0YSPUGW4iAtZZ%2BI5e7hOq1WlOx%2BKm5etPG2hH3tIMChsA2JwuIDbLE6\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafd8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7600,"size_decoded":3539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5674a50b2905cff0dc613fe35a6bc69","sha1":"0d88ea66777afd5f176f0aadecb2d08114a863c0","sha256":"307968ce34abeeb4f6539b1052942bd572543fc9278b07bf96b5cc55dd5f69a0","sha512":"2741a909a32df4183d8aabb30417bf19bcf4b6c1948a133d3172234d7e818974a589d94dbe09136eb855b70b605e0568baf57c54466072663c0c3a1c887fc5b6","ssdeep":"96:0VOiLMQhurFfZMND/L6o7vWwuJqwunvo4gQIplm+JSUz6jYX8de5QbAEfSewhK2+:0V5MBZMw0WfunAHdlm+CAEaiV7","tlshash":"4af175d8333a83e8e416b3efbb4550947e1a95d4aad1c1b0c3b11d8dde4226c8c6dc93","first_seen":"2025-04-09T06:18:07.467517Z","last_seen":"2026-10-14T13:22:11.797204Z","times_seen":447,"resource_available":false,"data":null}},"time_used":4864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/11.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.671Z","timestamp":1789800414671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/11.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"303-659d32779555a\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y33Xim8UoMGCTykEaDifuL4soWvvZzqtmuH%2F7b3WDAnBqJrof1FRQNjRpregU0F4dNvhJAr39C9YsykBTqsAGafeixF7RfgDNHCxQYXWOJIJYLvaFpL9jUSHlMyZOcFgVRPhuu4F\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfe6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771,"size_decoded":1087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53b168f81deed9f34dd0e31accc7b4de","sha1":"39a20f8cd38cfef68ac8332a284a979231127441","sha256":"6ebab3ed72af9e33ec36dd1d85f01ec8d4914a12dc75060738e999fa79b8fdcc","sha512":"c94ead9886902d2c036bd1b37c8e670eaf2eebde8bf341d556bdad8a30c9fb4c64f65d67bc10023488d89cff330374cfc8da90af1b94f692e4557df98d748e48","ssdeep":"","tlshash":"3801bdc0b1048b785868c5f2f5a5c03c06b454a492ac54fccbc3378230a4ad64e07e0b","first_seen":"2025-04-10T04:11:56.949131Z","last_seen":"2026-10-14T13:22:12.260458Z","times_seen":297,"resource_available":false,"data":null}},"time_used":3851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/2.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.682Z","timestamp":1789800414682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/2.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"14b-659d326b341cb\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dx65LpWzaoozRkfhD2qftRxwTnOaA2j7fNJijHWlJj%2BrUs54nmujvEEknTdzY8wKCYtAFYf3B9V4LPHNaVWq1jWrVQWH3PPp45sj%2FcU7sqWrlrWe23pdNSNk%2BLqB55%2FSTmmkNDCH\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcff0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":941,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdae08509e949c7b6216a744b14f0087","sha1":"fa98336203093e0b00048946f9dfd7d8be578971","sha256":"21b1ffe201826ba5d027f814baab9103938898c0be374d3cc948bd119b55ce66","sha512":"91fb66a90e8b08b16a88d091b8aa02f8ddcbf180b5fcd5a2e84a425a3d42437efd698260e142556e7606052062fb82d00492daf8147c75c33897a3778c786da7","ssdeep":"","tlshash":"5ce07db7a5a8f84c188e4178ee2b7191202f20cc0d6e0decf5e42c15f1475dbf4459d8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-10-11T07:50:11.655913Z","times_seen":4102,"resource_available":false,"data":null}},"time_used":3837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/7.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.022Z","timestamp":1789800415022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/7.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"224c-659d32760c051\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYxkDx3RGA6MNVlUU%2BBzHFv6DykZsoQ7tii1QFB91Glg%2BUVTljXfLOPSc9woFhCORqanx8NSiBBfofhYuc4o5yNgi2Tjf3iOMEEb4HR0jIK0f5Do0pM2rEi%2B8AimHS2C71Tku2Eg\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1e857c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8780,"size_decoded":9476,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e194129f820af4eaf728bea18657402","sha1":"08cf24ea20efd0de296bfc3bb0858c9f6c16c710","sha256":"641eeadb29fe669694d2d96e6e706e350f8f07426ed81c3511e8594eae8f2d9a","sha512":"c196d1a286bce9fb9e3c2eebf6b7d2318b18b6e40c214f39a5583c6612bf2ba1dc3b8fc5857d57246bf883a580e637eef54093db3265af4b0add31705dd61c11","ssdeep":"192:JESYkZm3oaojaS67lEymMAJjehXf2ZJxxtk:ySqojupuMOjeo7xxtk","tlshash":"e602bfaf93c34321a782b658fed2d5df862d9b5814c0b2831cdb551044e2be2bb305c8","first_seen":"2026-07-17T10:04:37.468069Z","last_seen":"2026-09-27T02:59:54.74537Z","times_seen":16,"resource_available":false,"data":null}},"time_used":5546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/3.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.683Z","timestamp":1789800414683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/3.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"210-659d326b8336e\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tp40os1%2FspQYWMXKgLhjbS1sXprMlQkj4AAyT7kMMgcOGUWMAHj340rcfpPKC%2FCe6Vn6R4KYmTQRWaUcXePPAxOkmYq2jS3elebOZw7P3nBLWVJwmIjFLNwbixpfkS1RCFqBbz80\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcff2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18708d3e3f54116e2ea639fdd56dd6c5","sha1":"44ebb67fb9dfdad6fca084c0e14664ce0336547e","sha256":"c04105233b339af2c50fb99dd7ad33b5972ed58c48ff26c4ea2120fedc52ce19","sha512":"be845835d88146d794573785c81335c15ee837d930d6e191da7713ac84b3658c129160f22f5a396dbd5f59b88463918a3463ae1c8baf170dbfdf773f1cb9fccc","ssdeep":"","tlshash":"adf08be859287454a82f1ffcd67ca8e330a371f40b3d0ce9b1801512e94995b5ce2784","first_seen":"2023-04-26T17:00:46Z","last_seen":"2026-10-09T21:02:32.262127Z","times_seen":280,"resource_available":false,"data":null}},"time_used":4842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.721Z","timestamp":1789800414721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--ranbet-cl8b.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 45368\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-14T21:34:09.819224Z","times_seen":571341,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/13.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.989Z","timestamp":1789800414989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/13.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"2b26-659d32701eab8\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhIP8pev%2BnfeU%2BkMtecpsow31XK1zgX8XaIpEi2aWahinLGUPbvXtOjlp6iAiEstBdQKh%2FJcmdfYIy1j9PR3sm1KxAsz%2BQLgew7VaWaXdv9yhVRSC%2F%2F%2BBP9U%2Fhd41VjCj3fz5sVr\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1a83bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11046,"size_decoded":11753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f580bcf410d9ef879716c8999117f24d","sha1":"703773022b05a37be7e7dc6f9506affdcbd38d0c","sha256":"daac36ff19a9fb7daf4f880f7a43c41ed763b699a3527f5ee94a2fb6246dff77","sha512":"5ea3008a4e62ab440f78e9a013c17a8b0ef4e478209b83af6793e18cc72103df10a6d81221160916372ee930f476201f46917ce1bff040665c3ff4d86a5af5a2","ssdeep":"192:Eb2qxC8JWhPxfckAsklkoYl86hYvlFhyrnD4t3LsT+sAMXR+k9xd0TF9/KzzO2b9:P8k5Alg5atFhyot3LsT+sAkTS7/qTWHA","tlshash":"af32bf38357a47987171e9f00b6697f0fc934fd9e98693870450cb779b48a5e7503282","first_seen":"2026-07-17T10:04:37.429548Z","last_seen":"2026-09-19T06:52:10.075167Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/10.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.021Z","timestamp":1789800415021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/10.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"208c-659d326f82e82\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfM0JeHPCP43eE0gNw%2BDHAUIPFoymthYxosEzVYrITuHGOXIGjgl7TGs4NfEVgSrLWCEQpABD1ySY3d0atswPSK8IpX9xbsHXN8Mb1iM%2Bbf8ptb%2BPFwnc6TwfIoIZfWg6WrmfSM0\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1e856c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8332,"size_decoded":9028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"96c20fa904bbe99122efc0d4ad591aee","sha1":"5012649be17502f468067368ed907c0b625b463d","sha256":"b74f0e030da0a8dab1f763a13195c81e6b1137e7a3ee2a7758d5a11e783fcdbe","sha512":"e60024425511959763dec7c1856d03f0525b85d3b7b6526be530ae31f6a9754145c7b8d3106bda884752afdc36b442d71b92810d67ea4fafc7554ef392278014","ssdeep":"192:y6tlSHYeRZ0hIrrKoCkBla0P0UIYxX5E8rw9cKwCoHoMb1x:UHYefegrI0P0sd5EqCcxCoHoI1","tlshash":"4d02aecd781c9e6dee34f27af734468ba7930f6c95d04a2ad863964d054e0b92d83710","first_seen":"2026-07-17T10:04:37.494281Z","last_seen":"2026-09-19T06:52:10.059342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/5.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.662Z","timestamp":1789800414662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/5.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bf8-659d3278dc7c8\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFaFDnDYbZ3O0hcv1MYNS%2FgILy5Liw8wqtMCmJETqkmtOdAoYxEkJeaus0zeM7FpN5j2m9kSXC48S73DYVO1kDQ41M4%2BRp60QlRcBXGJTgpkDzeL5Glbiyd95dmo25FkcKGpV0eZ\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafdac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7160,"size_decoded":3433,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc344a155fef4a6b62af76f4958ff3c2","sha1":"468d6bc13c6602bc1f9091dfadc4e0d819b4ad11","sha256":"7e6ed94ae0eae5c8128cb8e566c61a54ea2bc8a72f302b4c82aa30a4db5215f9","sha512":"44a5561d56a5a09808693175b1935a3c20f822deae9cc6a6cf585ca057808d9d3158b50d4043a15d5de2096f7b64c510cd6150b0e7805317dfa7fe7c09c85ba1","ssdeep":"96:EvDDOv0PXHsiFNYt41W8vSJmZSumXAa5hHPHXI0a/byuhTlUE2Eub+BtkQZR6AeR:E3HT/Yq1bSJKSSOHP1za2Vb+Tf46QUyj","tlshash":"cee187c4367c86f4b905b76e428b50392e77a4f6efb6ed71c7422d0a744a42c0c5acd2","first_seen":"2025-04-30T09:04:53.185798Z","last_seen":"2026-10-13T06:04:53.797738Z","times_seen":155,"resource_available":false,"data":null}},"time_used":4862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/icon_x_logo.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.689Z","timestamp":1789800414689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/icon_x_logo.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2ac-659d31b81aff8\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwuFe%2FaHpZy1fkkPaFwNA3q9vjTCgJH%2BmKUKnOBFHtTcjKHgKlpzpQ4wQKUDDwlOrIeW3WDSqWqBY6JIugqCQgjsChD9ckGASZg3espQDiKlu3QXzKnDZdNXnmFygUeAv4V8yRVh\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfdff8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":1078,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"902cc4553a1f47dfd0e8722f7342a4b4","sha1":"60a3b7fff8714bef8cfc85291a827d2467ae9a51","sha256":"42cf0eb7c84d8fd393ba8e7dc3782c9293a233a4218085b0e1cdbcd0abfb5b0a","sha512":"f1be4f2dd2fe13a8a8b9b48bc45f117bde18fb754ba6bd7d7aa774437124a3e85ce1d3f026d56714e9f4a78d56382b35202892507e03524a34f3c357799d6239","ssdeep":"","tlshash":"5f0102f060e89691120d07093c3834547a12567323cd826833cc07d6ef4f5c2a99bb84","first_seen":"2025-12-01T11:28:00.223509Z","last_seen":"2026-09-19T06:52:10.056614Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/6.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.699Z","timestamp":1789800414699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/6.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6be-659d326dfff09\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oom0K2VZIo1LQkvKZhdqiI8TeJZa6rGMjwl%2F4dOPCJ9nLsIbXzmctdbCNedKUsEEpvXWCsOihyQmlHLLXMmhQxnYio7DRnUdzc9%2FfOw%2FkkqN8ejAgL9f3NcT1a3uxz7x9aL%2FHoF8\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe800c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1726,"size_decoded":1491,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f92a95b4ecb51c329d091ebb4b29559","sha1":"517d2150dcd47aa10904ed2fe99f1c9d008fed7b","sha256":"255bda282b7f1bb23a8697667d71454e2a5b6bca86c017010cfc25cc092559ba","sha512":"ca19339142d3dc89b46d746d354f4175463fd64043f37b56d18c9f7ba20b5100ebe67bb41e2a84476a2ec7f53206b3bc5c5d1226a2a5d110aad0a3f553cbf63b","ssdeep":"","tlshash":"2c3176fad1c9a6e6d30dc3749c259d7526d2207aafb08098a3d1bea4f86a1dd1c4c486","first_seen":"2026-07-17T10:04:37.540563Z","last_seen":"2026-09-19T06:52:10.097528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/5.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.054Z","timestamp":1789800415054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/5.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"b92-659d327c4c60e\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0ov6Kos9Zba4j21ap7nlCoPOtCVyVLVJJPfRb6Nd1qeAOQ27lzMVVoAp%2BuLmyDkFnMEqkxZb0slj4b3omqhxmXtIgcKnJCqOpPMd1P2xDeyUTgpGkTksBB2tCOV3MvZVg7XhB0O\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d21874c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2962,"size_decoded":3653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acec1fc207a24c3af8e7e106b4ab0afc","sha1":"22b3391bf1353d5cccd6b83f3df05593ea1d7dab","sha256":"9a0a1ce387c526a81621a1e25a287a20a3d43e53748eb73707be3a426972648d","sha512":"e4b49188fdec1435592278d740f9ee4b12b22482184e530d3ed039ad1a2d2d3a588b09b536a9dcebaf89a48763a0f2f00b88667ba8c705ca82a474eb971cb2a4","ssdeep":"","tlshash":"48516dd8ced2f49b81d1aced403e2565ab06e14b4ef873217b8a04c094ee273a7e4455","first_seen":"2026-07-17T10:04:37.55418Z","last_seen":"2026-09-19T06:52:10.085847Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/banner2.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.654Z","timestamp":1789800414654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/banner2.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:56 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:33 GMT\r\netag: \"1a19e-659d31b6de96b\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f05QODMCA2cVEzvpzjLpcNhJD4uv46OgADVpdk3l%2FDgslb%2BWwB57xw1ZlgK6UOSizSxDGbbtgfyiN%2BfgfH6bxX%2BNAMPcpJgObRQ8QQlRFGgOx3SblJI%2BO%2FMucpZTcuNJ54JNklvX\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cf9fcdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106910,"size_decoded":107615,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53ae3e81248bd9aaea0f2a16af1d0ead","sha1":"a3b551496409d0d33d2962e1c1d4c01cd76d9b32","sha256":"52f219eaf30c642cf7d93ea45017afde1720799d8a8edd1ad1620a0ebdc403fd","sha512":"8dbaf68e886ea2c51e77a1c0cfc661e470fda11ae58ec60456c569584346cd16f18df77f6948403fc6ab19bf3824c70d1541eba271633a74bf43ac4d54167e37","ssdeep":"3072:+4/8/ANjI1acwsl1FuKIZYhZfmfX3P0eAAJM8B:+4/8/gjwwetqkp03PZb","tlshash":"c0a312d9107769fde5c9dfc10ae2216d92e13a0bf20217f9c2bd8ba1f65d0a13c27515","first_seen":"2025-12-01T11:28:00.240684Z","last_seen":"2026-09-19T06:52:10.053403Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1845,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/5.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.698Z","timestamp":1789800414698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/5.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"14b-659d326df5ee1\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLitc5XTgWK30WFjtA5rjW%2FgaKhJG99S55OflQzADGjOaDSyTGCnNVlcx0Lpw1RoEoZHRYhKOCnYEFf7MY0B2%2BE9UOMRXlxMaUiFycHbK3uc1rZSheUeVtLORPfxyRx3pqmthu8w\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfefffc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdae08509e949c7b6216a744b14f0087","sha1":"fa98336203093e0b00048946f9dfd7d8be578971","sha256":"21b1ffe201826ba5d027f814baab9103938898c0be374d3cc948bd119b55ce66","sha512":"91fb66a90e8b08b16a88d091b8aa02f8ddcbf180b5fcd5a2e84a425a3d42437efd698260e142556e7606052062fb82d00492daf8147c75c33897a3778c786da7","ssdeep":"","tlshash":"5ce07db7a5a8f84c188e4178ee2b7191202f20cc0d6e0decf5e42c15f1475dbf4459d8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-10-11T07:50:11.655913Z","times_seen":4102,"resource_available":false,"data":null}},"time_used":4819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/17.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.990Z","timestamp":1789800414990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/17.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"2c7a-659d3270ba307\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4DcA%2Bh47i%2FwEV7WyKEFnkhVxUjWbWstW3BOVUCWwJgUAFi0qI53vGG1%2FK15wlZZXnDrd6341u2Xn8HNNhs0kRjnSQpKO2tRoV%2B8A2FSIo65UDdhT1jdTnKPdGqBYVBZldoYevPo\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1b83ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11386,"size_decoded":12085,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3adcd08b6032a39136c12f60174b611","sha1":"ada945e2fad101a57a0b978462ad2f156c84193c","sha256":"1de461e5e87bfb25677fcee44a861f3d1b8ea657d5fdfb865df4239b4234e980","sha512":"9350f93d59b0fc26c9dc3e8dd35d162e5ac6814d3c02e2e89d013b7e5b1d178ea5152d7f78215855d40adfc978d53294afb73416ca7e740cb616b5389dea7492","ssdeep":"192:jwJGrmui8FXGIdCyVNu52+fgBgm+gPEcC2SwNw/2YDXcHp396JcWXir84beU2b:jkGr+8hnRVM00gjpPEcpSJ/2Y4Hp396j","tlshash":"1232b0bd5c86bc763f8cb9048b4ccaa197d42a55d6500704bd4ca0f715edccddb32a89","first_seen":"2026-07-17T10:04:37.460467Z","last_seen":"2026-09-19T06:52:10.050672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/2.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.015Z","timestamp":1789800415015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/2.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"6d9e-659d32711485b\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wea0v%2Fg6vzYa0wUwvTKMhfv9CV528w3YsZW73hVyng777Y3kONv8%2BXnSCG2BHpYc5GneaDnQJ27wRJ7z1K%2BuWudTcLkrnT1FHgag8IMYmOBziKXJLZV6k8lrebY04%2F3Td4%2BiHDVm\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d852c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28062\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28062,"size_decoded":28763,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d96ce2ea09f9c695f6f6131b46e1476b","sha1":"5d9bdb2b99de5531e9d9e3fb5ff48f96f25aafcc","sha256":"212da0d18a52acda192162216bc34bec3f3dd5744d63b1dfd867e9fc079956b9","sha512":"93101e870a2522b3974c6b245e299ff9308148ff234842ec4de785d9fbd4a5332c660a38822b53911780b6143db79531f47947d8e649451c63f80201ba3ea03b","ssdeep":"768:kpBlaKabCnXglGuknHTRSHz2kl1K9gYeBncpt5a/7xSTDd:AmCXg3knzRc1K9gxn2aNSTp","tlshash":"e4c2e1b4cf30f355bdef02797549edc2462bcb26265f3451d0dd44b68ebae88b29a014","first_seen":"2026-07-17T10:04:37.546569Z","last_seen":"2026-09-19T06:52:10.111911Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6590,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=rand-array\u0026total-games=29\u0026total-sports=16\u0026total-originals=8","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.632Z","timestamp":1789800414632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=rand-array\u0026total-games=29\u0026total-sports=16\u0026total-originals=8 HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OD1byZzIFfHnIiq9%2FAIoF25sioCtfhHmA1qFv6Ee16%2BlJbC3p78gFk9CHTnym4UGs2jNDCKKfhQ7kjWYv3e0BB%2BQFU3QYDPWAcs05jVMyFgKO%2BNr8h4OqtX1NoIOOQe1WHYT6KLh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2cf7fbbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699,"size_decoded":1062,"mime_type":"application/json","magic":"JSON text data","md5":"97a95575306f9f08b9b6a112a78474f1","sha1":"f4b9bad8eb4bbce6b49971ec79c2987fc4bc8a73","sha256":"054aa88680900d599aa0970546e4aa2d20f4783183e190ec6680e63d60ceb427","sha512":"bd3878f9d83a5bdaffe7a4d100bc820393c1eaa521aa95467ec0aaf614f5ba075e3aaf3a025dae7a78f37acc26d512d27a2e6ccda269dec7acf8bd1cf6867c63","ssdeep":"","tlshash":"9e0125e4690440afb7853f5978ef7088fbf02cd63811d73407a122a6a91aadb103bd03","first_seen":"2026-09-19T06:47:33.232701Z","last_seen":"2026-09-19T06:47:33.232701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/16.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.678Z","timestamp":1789800414678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/16.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e7a-659d327839279\"\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3UAKDcoiwWECW2g3XoLqvGi6Gq7sq7r4VgMzBDl6N%2BHzXNYicvXbjwetEacT%2FQW1gyvMLHWIdoj1go7wWu8KXou7Xm1%2BLCNjLyLEtw9Kgcmu3jB2qp3kR0hXncaOGQRbGQNXwdG\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfebc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15994,"size_decoded":7187,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5865bc7280f971a779e7cf5c986e97d","sha1":"8bc93873c60c6416f9663b5e71c3f673b8985004","sha256":"c93e0ce65d2934c5897634ce17b258ec8b3b94355560b7083c65f67b69e474cb","sha512":"253400b49f7514456953f1359c49af2089aab97edd33e5710f9b0dc52d41ef40d1491f79b36925af45032d77d139657fa602e85b01b678d853ae60b4b15a97ec","ssdeep":"384:FnACaiYbk/+0RRQCXzLTjJ9Ko/mkuMuY9RMYifzI3bC:0C+0Rlqo/myrMBzom","tlshash":"a57293e023f9a3f4f109b3fd862655a17e9326ec7781caa9c7a92c00f51506d1e8d8d6","first_seen":"2025-08-17T06:01:39.522666Z","last_seen":"2026-10-13T06:04:53.91005Z","times_seen":81,"resource_available":false,"data":null}},"time_used":4973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4840,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/10.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.045Z","timestamp":1789800415045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/10.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:58 GMT\r\netag: \"a9a-659d327ab796d\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ols9Mosc1vKKI8i2zZ6dQOP2OyTcrUAkd1csobXYe9YeXnMu2LmZMd0Aua3Avq8XN2tzh3JFoLIdUnCJOMZMJRu2aGq%2BqhR5NP8GOFozM5FEQgnqXeHtMSC8dUDtJt3XqTG0cNhw\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d2086bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2714,"size_decoded":3405,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19f86855922e5928fd58095cd9221454","sha1":"8cf3d9394c2843765ab44e1e8321c0f0b59297d1","sha256":"9fd1f386e261e872f0d59ec1a11de8b29900cbc5756231e852cdcd0541627e07","sha512":"21d8c9aea5dfca432685dc0d6cc39aa32dafc6e0cc1201eda1ea560c185db2f9d4f52b13d3cf1490582af56970912041f8fd769940918860b6dacf610a3bca12","ssdeep":"","tlshash":"62512bf4a3f7cae084c4c8d9f89d133fd4dbd155e412aca52be095ec0d5820756e58a6","first_seen":"2026-07-17T10:04:37.466257Z","last_seen":"2026-09-19T06:52:10.060086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/logo.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.651Z","timestamp":1789800414651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1d38-659d31b8c3f20\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lH9w2DHRoPqiE4U41VxP5FomJfc3zhe%2BHLsPCTqZQ9MRP5nUw2BiSnfay%2FCp%2BiB96ifZCEpxmncBV4xxevxN0z5cfYXh2uNcJsxbZpY5FJ2xWWKqP%2Bz5%2B5HUc0RJYFry%2F3djQDT\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cf9fcac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":3894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3722843dd62574a69a7ff815395927c7","sha1":"d06d8164e20bb17d11abb216033705d78b856bd3","sha256":"829f5f41f66e7796f118dcb9c41c30423ecac34846a6e8d81c7273e54a3ce4cf","sha512":"3dbe860be6787fd0b0e1082d5b125dd433b40f5b7ebc7b9133259dbc3c1b482a3e28b5eb825ec029ed4fa6094c16618759adca11194f8eb99968acb0e2d1c030","ssdeep":"192:tYUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tGXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"79f194ce3bb09ef88d75cbd2ff1320697a17c07b59848e20e1595f0d2a9081cde95d8a","first_seen":"2025-12-01T11:28:00.242862Z","last_seen":"2026-09-23T03:30:23.487838Z","times_seen":91,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/11.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.707Z","timestamp":1789800414707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/11.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"315-659d326d596f2\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y24ytNaJZnXwYSbGaGaLpqQjJoCMyvOeRHJnxLMTQSb2GGZyh2UPEnWIYTaZ8FdZOyiqyOuoNcOJaJgr%2BUWq7ZDN9x1hhJJ753dmTKKHGkdf%2FLFBHWQwNEpWDpVbhXOKq8brZdGZ\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe805c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":789,"size_decoded":1115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e09a8646cc403f45459a70e35f1be28","sha1":"17a26cf6314a360f9ea203391095441741a83f89","sha256":"306e9dc2219c90fc1dd07a63473c022ac5f8bc92f518b4c296513e0cf6b4ba83","sha512":"b60ef06bec4de04b7dc54f616ab8847fc38e631804d9f0b0a93b68f00d84ef9f73c0ae57a5cd3a5c35896a661d196db480381f89cb306b7b6447fdbdf9bc913c","ssdeep":"","tlshash":"4a01b1c5d754a3d79c0d2b8c430a283208f274f0af1dd894d2541f257b5b93566fc1c0","first_seen":"2026-07-15T07:59:04.396062Z","last_seen":"2026-09-19T06:52:10.112473Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/banner_back.63941b4f.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.719Z","timestamp":1789800414719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/banner_back.63941b4f.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/css/app.861dc22e.css\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:33 GMT\r\netag: \"52b6-659d31b6e0c93\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvQeursvRVnTMijG2nHBhmzLkL%2FKhsKgegBm6A3ycF5cYxnq6aEinPyw2P%2FJdbf8qlJuy%2B%2BTCENCdK9pwpGT6R3bomeWmx%2BJZ5Ff4G3CccDDv5lNMFn%2BNRqu9ldpq2RMoBn28S%2BH\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d00808c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21174,"size_decoded":21879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1665x341, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a90b2e56590e0ae04342f79dce2fc90","sha1":"f2d54323c4ccebea304c75a5a31881d29ae071c9","sha256":"2ca4e84242d1b3df11712820e746eb82976bce6e34246177ef0aa87485e541b8","sha512":"8d8ba379a0caeb96c49e49d90ba157cc05349735ee7428626db89d1fc81c76ec00942391359d6d02d220381a10c69574a2613d39361fbb1562c5444f1e78d136","ssdeep":"384:NubdSSWkYFaQW6XKv1ZDM2sjCaAt9hAQ4az/KKYmk+oJ:IdSSWgQW6XU42sjCa6hAQ9fd7oJ","tlshash":"b592e1c5eb305b0009c75ed991e7b61bc299319843da2aa611da3147bef7f31740d01e","first_seen":"2025-12-01T11:28:00.247598Z","last_seen":"2026-09-19T06:52:10.048318Z","times_seen":36,"resource_available":false,"data":null}},"time_used":5969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5821,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/5.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.007Z","timestamp":1789800415007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/5.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:50 GMT\r\netag: \"4d80-659d327341e6b\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbhnP2eBxsdAg8%2BXTuVxlY%2FEFrCMvw%2F6aOobT4eEbrFFjRYKPAHxczpDF7JzV3nt961vzlkoXb2LcJCC2fIA6%2BTSBUI8IXJB%2F%2BD8aJlc5FFmsS%2BFN9%2FhWHtPoL7jtT%2FCk5Cl%2B2O5\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1c845c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19840,"size_decoded":20551,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b111d449348103801ea7012b5d0ef5cd","sha1":"390f2750a943cca1ff21bffa5f0509775d202082","sha256":"6c90297748062b33a2a746e6fe9a2e098e9efca1c056f4e9be34400c3ec1fc63","sha512":"cacefe297e70a381aafb4b5445e5333b3d87e9c2ac77787c22ef7e5f65bf947c8111c7b8dcdcd184b3415458d8834d607d3c04dbd20bd1b971118566eb5fb723","ssdeep":"384:FtGR1tj7nA7B7Jeoz9ug80GxmKD8A1DHaehV5xvOR3KwK1RjpiSG:FM1ANz8Xxm+8A1DHaelgawWR8","tlshash":"6f92d06ec6c7cd55a6b47489c231f0899416cc0b8c2e6f64eec41649ac2f55264fd29c","first_seen":"2026-07-17T10:04:37.534857Z","last_seen":"2026-09-19T06:52:10.113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5565,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/25.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.013Z","timestamp":1789800415013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/25.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"396a-659d327202ce5\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsjCgAJ17DtjQVC%2F99RDSteU0ZGR7Jgy343oH28qggq5Ci4uLb8VWmzdxpcMeT0oViDQ5tRBWq8nDwBZe1fFK5ZEA7vI457dd0zRalwHNqQpW0aJb1XddpzywbmweKxXxPeKQ8Qu\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d84ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14698\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14698,"size_decoded":15391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b609466636806f4e38a1197e02d2e647","sha1":"92c0e8bc4566703fbefd404bcd85606a0cc2ed53","sha256":"3411342c163789dc3d55805d511bb67671940d83425ede5d00ddab12b2a1fde3","sha512":"f83f19b1ced5e287808922b6c8527df524f9e0edf79fb9f7a3866381105def9fcbbf927392cf2d265086207f475255ab9fc5c30852720a27ac46b150f4c7fdae","ssdeep":"192:vzrvJF2s013a+Z7DiuTFDMN89wlOhAouvd6RFJ7s/uhCyOgis+SuotRnOMsWu7cH:LrrV01qUuGQB6AoCdq2Gz0Qn2j7yOmF","tlshash":"8362d00f9023edbf5c79b89f453089ad0f8b790219271eb9ac5f254988dc462edcd399","first_seen":"2026-07-17T10:04:37.53106Z","last_seen":"2026-09-19T06:52:10.051901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5553,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/23.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.016Z","timestamp":1789800415016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/23.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"35d6-659d3271b3b42\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fqbtJtQC%2FQpgtx2LJ5WsFeVtCGLKRm%2FIN9m%2B7n8BSB9BRnNxNdmEFU99Ity%2BAe2Z8HJ3IRos8rYwuUHiIOjdTyLATPy7HuAPekFReJ3ZqCyfOzaXX8yzGcRP%2BH1zgCYxaQcEohw\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d850c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13782,"size_decoded":14483,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbee88b1a806a9ffade41147b79fd9d1","sha1":"8861e5c5f413689d367089fa83c17d3e959db579","sha256":"6bb1c8737a4abf8da878bcf17899cc860de90cc6c6a7a0c2c29f99bea40584ba","sha512":"6f1b92054fa378f90aff9357e036726d1a59555e04bc828fd62e076a29779447a6ef36766229ff28cd0ee0a5b4a1c3f989ec9cfaf0e606ac971a2b505a239aa7","ssdeep":"384:sBoRBcIqkTDglzLcWmvjfu8EFSYS5prTG0i0VFz+e:sBoRRns/cxAFSYS5pFz","tlshash":"1d52e165c6963401baeb50a86aea8b6623d0318463f7466ef4fe0e805e3671fc0dc413","first_seen":"2026-07-17T10:04:37.549088Z","last_seen":"2026-09-19T06:52:10.109083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/7.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.036Z","timestamp":1789800415036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/7.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"e82-659d327c9bf81\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiCJdJ4YvDZ06bSqFIK%2BWlcgLJNq6lRz0Mv%2B2kK8FiiGVUyG05ibQ6v9pKDYe60u%2BUcD7DIFHRFBvptPi1MlfJRaktIpFRnpydJRafDSm9OWhbE4THb5xBCMVNXhvgUxjc71xm2y\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f860c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3714,"size_decoded":4409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"504f522009cd64e14ffc3ee80c5bcf94","sha1":"87c2386dd36e6f1cc03a798c8c695f0ada1a379b","sha256":"d6a6dbc24796126dd7d3e104a33072552d103e3f4a07e472ae3ac3cae9f5b180","sha512":"e0f475fd69a04f8b94443cfb8bae16a906ab39feb088cf63adc11eac42a9c33c59aae0728688c5e8b57660e0ac90f7c1cebcbdc9914e42891fa3d6d507eb6a33","ssdeep":"","tlshash":"b7716c6e73b773712142b41759886c5f192eecc1b81e2f5020266ae3d0d40652bbcd9b","first_seen":"2026-06-14T08:39:52.57357Z","last_seen":"2026-09-19T06:52:10.04609Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/15.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.048Z","timestamp":1789800415048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/15.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"fd4-659d327ba811f\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FggCmoTeEP5CvGKikf0zy1G2KPsVwZX2hFl8aUYjlk6r1jUugGzBdeAE%2F5gFiVWRWCzSNRDSLx%2B27MSj0Dq7Kts3Eh1e3r9TurSoxmr67ay%2FNJI7X7Vlag3RR8GkN0TfzTs%2FLIX\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d2086fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4052\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4052,"size_decoded":4751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcdde265284cde30f8a3a9cce323dce6","sha1":"f120bb59f987f76b7b4de4e59953d6af55e7ef64","sha256":"0eb88e0a60f793ffce8e86837a70cff70706a375a0181691e340e86ed2b2646d","sha512":"b048891cbc2d4abd9b46553fabda48b003736a38f0c16573a074b9220cbe6a4cfc473b71a8b989c54e71d10c861ed14d372588223866f52297bdffd6a41df96a","ssdeep":"","tlshash":"4e816d1ca49d1849dc1f0f5b1bffd11d427da686097fca9403232a994fe894bc0a94d8","first_seen":"2026-07-17T10:04:37.511327Z","last_seen":"2026-09-19T06:52:10.094874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=get-text\u0026pais=NO","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.638Z","timestamp":1789800414638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=get-text\u0026pais=NO HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XS18yE2zfQFTCkhLlXdrWQvTEr2V29hMXOpeRQwZH%2FXGK%2FGzFxZUKSyIMLn77J0ElJyvXcEtJs0IjyoBp4RictbBR5%2B7muwJ4Th55o29KAaQjvgmlknsM9gjuGicd%2FndJIwIrHho\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2cf7fbfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4753,"size_decoded":3088,"mime_type":"application/json","magic":"JSON text data","md5":"7ce464c411355f77e32bdff4180ecfa2","sha1":"bf9f80e505b9d90a67ed7aedce0a8b5df3d1bc79","sha256":"769e95acf0839abd8cd1ed18ac53eba09d8180e7b1c55d1ed1075d9bd6c267cc","sha512":"f65e096ab9c2ededd99d0eb1d56173b830152bf5d5019079138a15d6cf0eafddf25e024da8f0dfb17c4dc923c761948708a51b2a9ce7516e88817a69d4992bda","ssdeep":"96:/AtgX3vuINiauP+r2TeEUOigAH2fcps4NsXtZzFyPtmz+sYrxp6a:/AtgXaaX2TcpsA+aYYtpH","tlshash":"3ca10a1d074c9ab2cb9a23d43ddbbe2494fd014a96498c1a9cfd951c02dd32de2436eb","first_seen":"2026-09-19T06:47:33.25376Z","last_seen":"2026-09-19T06:52:10.09814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=get-wins","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.666Z","timestamp":1789800414666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=get-wins HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTZs4QsfO23mVK7yE%2B6Y1lhyTr7FOhp8A6nra0S%2BPybpb42q%2FlD03nG57rPU9hdbDCyn3dQO75xQ4SKxlUx3Gb23BTk3rtQ%2FyxxALBAVWeLrmoN0RCAIt52YlgSybbX7Xv2peSTV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2cfafdec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":1048,"mime_type":"application/json","magic":"JSON text data","md5":"f197d6f2d3978284a3fc32752e71abdd","sha1":"57de3d89b9e9b3de65f72d3f58c77ba80e635a0d","sha256":"b6d3ca324d56c7a81675bf72dd2767b2498c992561b8eff250f1bdc33c0a0f70","sha512":"407dbcb485b6e257c2832d62f821e5ee3801816997955387aaf65c547a6eb3f13ce7e34fa1b2f8add1a5240929da50d65de647cd5603f83db488cb0198fe2dbd","ssdeep":"","tlshash":"4ff07f9921154d3f16173a203ccb76adb531bcca7cfacae1730088856c08a962637ae4","first_seen":"2026-09-19T06:47:33.255337Z","last_seen":"2026-09-19T06:47:33.255337Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/7.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.996Z","timestamp":1789800414996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/7.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:51 GMT\r\netag: \"3f04-659d327394e8e\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoDOD6Ipe6tklMw0DDP0Xl1axYbImutBy3JmW38B0OtMivZsHUKB0qT%2BpDYt1ZzEJEr6Ju6LyDnh%2FqND71x526FXvDWug75G%2FrkXo6bUQsOwBJtcGiiGiB8GWFzZCjhhas26wv36\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1b840c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16132,"size_decoded":16829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4d969c9b1351e0fc1f60219a33a9179","sha1":"eff1d2391264530275887d2830ebf04e4169b786","sha256":"0e625841b45601d6c753fd073e340c897261c912170214801be3b102eceac9da","sha512":"923908efc166420e4b6c50d3591e416cbe3395294860cec101a8a05ca537f4c9a0e762e32dd6073c73a4728b48de3a26b26239d723bac2f993edec6da894b5d9","ssdeep":"384:ceWZYjK1wwALs0dtNi52aza2W2w7BKFbjPItVr4rZ:sCjAwwALxXiUaemwcFHILr4V","tlshash":"6472d095d1ef4b496c47a931fbae0e888488944e531713f9debddc2e04a898ed5f10ac","first_seen":"2026-07-15T07:58:59.877728Z","last_seen":"2026-09-19T06:52:10.047708Z","times_seen":4,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/9.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.038Z","timestamp":1789800415038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/9.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:01 GMT\r\netag: \"b92-659d327ceb50d\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMfMMNFLm2p5EVz3bt5SLpl%2BYkqRfwrPaYv4DdfoobZ4UfLvRJsfoaNpPfT5xR6z%2B3dNgygeVKd%2Bqxd2o39LySO9crEqxwb%2Bd9q%2F6xbw5PGFxKCBfFmQJTW68rKoNDHBeYP5BPUK\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f864c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2962,"size_decoded":3661,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8cbe6d7fb6186f4b2f7566f53db61bb","sha1":"2f8565e4a4f90bf1870289815f7190d22919003d","sha256":"bb42b8e2bd652870279b1a287dc9a36dbacb886ac9b9ef6d12b8b15099708f40","sha512":"a424ac24f5aea7a8593fbab2f636f8599d560c1def17e2bc308a6bd3a5f324bbe976a503e2ad83f71d7cbef631d67843668265b8745a6062961bcfc4f9bb2170","ssdeep":"","tlshash":"2c514da160019935dd9dfce2995a33063cb808af2db5b5968090f9f74a1007b1436d0f","first_seen":"2026-06-14T08:39:52.382175Z","last_seen":"2026-09-19T06:52:10.107861Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/9.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.668Z","timestamp":1789800414668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/9.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:57 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"434c-659d32798109f\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dp47SOq%2BhR6UTieruGWHP2v8yD5Wi4ZRBmCQ4ZcUMXLDHnFgPsf4eBNi9Vo33ZCJcxxO%2F9aU5aKnUE1WlU1e28jOGeMN6k%2FxW%2FWEZxIe278yKVVA2ti4Z0rZBJfd6wHbiZbzxy%2FI\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfafe2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17228,"size_decoded":8122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b372d0a1e0015b74cba7a42ccca5fa91","sha1":"04a01ce5eb656939de1cb56290c937c41e023920","sha256":"b0c3d9b7f8e40ed1c713a4d1f3f22716fb0b7baf9286977cbb35c8e6d5c8f790","sha512":"f97079ec6fdb5738aaab437628eb4d8907372a427a1836f7e810605794ff41d41434c60a4174d9f59b4dd9114c0689ff893d6a559d5a5721aaa1b915a3b2277c","ssdeep":"384:maJnv0qTjlRWMOrojcY6opbCXGydn492ctp:m2nvRfEH3WydnRI","tlshash":"6672b6d027b9d3f8f526f7ea9622f425bc0b35feba41ca94c3616d40e14411c1d89cea","first_seen":"2025-03-18T16:26:53.604243Z","last_seen":"2026-10-13T06:04:54.14467Z","times_seen":208,"resource_available":false,"data":null}},"time_used":2978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2838,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/4.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.032Z","timestamp":1789800415032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/4.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"3702-659d32757235b\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiqq3QRyqcb7NLOgT59ZWmwxCMJowl0Gw2QfzMTHlYeo877H0g0B8IdI1rUUr3qnSMJ5JIxQa%2BrJdsy0bbWLYdbQJus1V0KdFYDVzUB%2F%2FVTk4I7fhuNSxrCNhuwoYaHtxa5YyV05\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14082\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14082,"size_decoded":14779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69a5a84f9bb0aeda11c213b386c42fb8","sha1":"5681caa74d3d25d90b034cb9dfd28d092bfe89fb","sha256":"cb053bdf06048dcd504fddb123bed791606bc5f3a5cfc6688b9e9bc6662e552f","sha512":"c29c7136477257f57c88bd3cd86757a3669db178c4c759e69660c5aff3d53314273f3fc1323d3d693bdbeda7bf106e7bc9d316ec705f3a981b569c6fa20b4030","ssdeep":"384:4TA7mscz3wbVKH2jL+pLuCkUUT9K/A920FugOp9P:4hiJVaDkUxAwMOv","tlshash":"c252d1e0e4f2e056b95fb03e1f17fdb58a15414e300d5184be2b3282c39beba1076e55","first_seen":"2026-07-17T10:04:37.465309Z","last_seen":"2026-09-19T06:52:10.090244Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/interac.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.687Z","timestamp":1789800414687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/interac.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:43 GMT\r\netag: \"488-659d326bd4069\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSY6jvgIeRiH%2BCWJxHvW5TmzxHqIWQ6VdiKfGS8ZtywWXBnfvfrNc%2FdVy8sczt%2Ftd4kKPMw76pv8KOBHtbVUDzy5sodwEoOngKn84OTjIs%2BajRXvsyZSyM3EBDf97utlASRaqusu\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cfcff6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":1859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8803705b52327e5c31c6d39b7a708e16","sha1":"b01cb24d70d6b281bd3cca288ea6b2596341c57e","sha256":"15c77c8ae56c2b8965cc86dad3bee9e99852683f612f17622f5e6257a993299f","sha512":"aebeeeb7648bd1095bd71d106cf81afa1371b9c8e727816d9de3597fa4f990e85e03d715fd43beaefe781e1f1a9cf6714eda38051cec023945d82782af59afcd","ssdeep":"","tlshash":"be21a798190821ef6e08e134966fb4909b64132cde20a898f4e00c912ca54dcf5194ed","first_seen":"2026-07-17T10:04:37.431982Z","last_seen":"2026-09-19T06:52:10.093183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/3.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.987Z","timestamp":1789800414987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/3.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:50 GMT\r\netag: \"395c-659d3272ef22f\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPvTNrMv%2B0jZc2dz00ZaQd1s3HzKoL%2B%2BS6dDQD8MF6HqkDyKv5eldazrsL23rVFa19UOUhdNM2mWmmdBB%2Bg0HdOeTybfO7ya%2Bydi2ll8anPcs%2FgW4FVuWMb4q%2FXLxcqe7kGthjmx\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1a839c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14684,"size_decoded":15389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b06dfe0346a26e8e13b4b5ae727eda8","sha1":"35e5a6b269083f749ede0f598a04ab1235b182c9","sha256":"2a0e092cb0fb222f4f691ad9c8b6444234521c1083b61571b9c855b09d7fdb0e","sha512":"fc8aae6d0bf06aad330b53eeb2fbaaf53f4cd2933460ad10d1ac6b75decdb5beb2a0d3c5178f341a74e0da80fa2e5661e6b0e2671375324b77085f886c1a13ea","ssdeep":"384:bYkgh7d0hqrOxB9IxmqnwppqyVZ6BXB0an/7GJhj:b06KO79WwpV25Bn/aL","tlshash":"a862d03cc1e479d3da1c2cc1083ddaa68c9dafc56e232731641d18e7277681b29c8767","first_seen":"2025-12-01T11:28:00.266459Z","last_seen":"2026-09-19T06:52:10.072012Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5559,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/8.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.027Z","timestamp":1789800415027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/8.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"1f3c-659d327613d52\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPaWV9kPiHLq63hN64uYdMEhWJQ2xSZpDdAtqqflzGciXjFcn7dAffTt8OUXqkqrS3Kc22jeL5C8F2%2BFoGDSnAfKOorOVgqV1G619ti%2BWIj6VJfdKni9QDlym%2FEht56wcBeRPHhO\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7996,"size_decoded":8692,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d7b8cfe460a00a188a7f3aad7779a6","sha1":"eff39f2ac03bd64a842dcd4f9aed080eb078f0fa","sha256":"abe0568d75ad0a31229b4c9fd971d3e87b07424fe3eb554758870427bd1688f9","sha512":"a006f010530092549ae93fb3f28f08a9192311630350e4efa1861d747658971ac9acd1add1e274257b83131b0dc50c94e8572ab1f4cd50706041c56660079b3c","ssdeep":"192:ZLsjNrUtWG/+F8CbTVWBdsCUMdWGQceqwOJcpO:ZLsxrUME+CcIBdsxCeqwcf","tlshash":"b4f1b083c5ae7a1e43d39e20363d551e83a1ac0549eae98e06d60c1e84a7bf30c457bf","first_seen":"2026-07-17T10:04:37.461574Z","last_seen":"2026-09-27T02:59:54.736888Z","times_seen":16,"resource_available":false,"data":null}},"time_used":6578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/14.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.047Z","timestamp":1789800415047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/14.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"aa6-659d327b5c62c\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mmnCa9cliUr0%2BRFSwrUD%2FDllNt1oXJQVqqxWPeWQrr8rgGrWpxkAJeTGjtxf%2FcpHgzb3K7fEg%2FK9VEObTHO7m5DkFFpFIqxSXAMtJgDkqM7ChEqWazEolfV9D6xADAs5rrDeFll\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d2086ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":3423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc5d114f0004c98e29cec3b32a8c2a04","sha1":"0765d2cc8935b0c65d77769c7174f8230bd55113","sha256":"d890f8f07b09ac4947eb68fab9f16e6fb62b60b3c2a9dd92c08629a6682b44f0","sha512":"48a877cccf0534008e1d9309340665e746e62add2e679ee91c98e3ea0207114d3279d3b4287f81a02e833bfff3ff4f96916cf8c53b7706e574584ee3454e22f9","ssdeep":"","tlshash":"03515bf120e833034e89b440219f4f7d5c96ebb72e7fd4b4288a4724272c102746e349","first_seen":"2026-07-17T10:04:37.521937Z","last_seen":"2026-09-19T06:52:10.115255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/7.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.700Z","timestamp":1789800414700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/7.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"35c-659d326e4640c\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWGOGwqb1fR0dYQEbFXrYNXP8BQ5lLC4CwGnA2ItU288Qa%2FFkZ9inm0CfjMI%2B7q5nxjvdaFsxVbaJ4WOsi4GNMbpiidZSpy0qRUxqODpZFPeAeJAhmPY2WuHMNeCZVeDqUT10jqf\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfe801c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":1164,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce208136fd02768115d89e3bbdb58748","sha1":"82dfac178adacd980c363657804ff3faf75d3955","sha256":"3a0972cc7d6d7ccee2cb1580008d67f77662d5c621991448d980c77fb99e5123","sha512":"bfcf318631a014a58e725cc3eb818dc5ed3936784077458ccf8d5f271cd7c921f25bf42e9abd07598dd706e1b80a4db5132c8363f745ae09151447bf2ae454e3","ssdeep":"","tlshash":"0611c2fa8054d18fa30ce7740619703d166f54e06a7c860196e7492d39eb22fcf186c9","first_seen":"2026-07-08T12:12:35.450106Z","last_seen":"2026-09-19T06:52:10.05753Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/8.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.012Z","timestamp":1789800415012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/8.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:51 GMT\r\netag: \"52ba-659d3273e6b2a\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Yw3wzhxR7qQaMA%2FH33y95f%2Fkh4xmVnzw6ZDKnVqcTToz9lJvyekd7K5WVq37bIb3fcMmF%2Fb6%2Ft%2FxPyEnzZRfj3r9KmpoTcx2yokneHO85W%2BLWQABVHCz%2FzDrCld6C4ptWZw5rm1\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d84fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21178\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21178,"size_decoded":21883,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0975494ceac7e259a1325a5f9fca31a5","sha1":"fd18e831f02dfdf4fb03bc6a41b7db7b92ed481c","sha256":"8d776634ccd32c107c1d672b35c0e33c2aa5ab421f1645d7db965f14e18c34b3","sha512":"74b9289a6cc89d1d09d37ea5475f4786f229c0e311028007a49326fb81b54cf76e7d2115b643ed789999f29746c890ac26444c6af498218a1f5e7e27ac6fc51f","ssdeep":"384:EjMEumlFMCWVmp0pRad1cCe9py9dMPay2t2YOi8nKA/OQe2m:pYCCWVybM9py22t+1m2","tlshash":"d992d0d85664321ec93454ae39d16139943ee700bf6333c6baaed2a2d472c9698d37c3","first_seen":"2026-07-17T10:04:37.46986Z","last_seen":"2026-09-19T06:52:10.114634Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5546,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/5.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.024Z","timestamp":1789800415024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/5.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"2aa6-659d3275bceae\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hW93aGkxubXvdUfSK0TcGc3MvAZU3Vr6mcITNsg7gNDABbyM%2FYNHJY4JtKIcrdYj%2BmgJb7%2F7vlftTT5cCYoG0wqvU1SQwv30wZT1jqTUoGsekTx4oVBkI1qayt4o3T8zCw%2FgSD6a\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1e858c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10918\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":11617,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89d0b140cd643f3a4586a44e2fe0454e","sha1":"4c54336fdad0a7daa196154ad9287ad71e4473cd","sha256":"3ef44353d6db5ae4174fb685f021f615db690d9c25f1b4580057f0de23a3535b","sha512":"2b6bdccf9c278c46eb8c353e5de2d34f6997a274df20a64fb9105cb173825140dab273f8daf96a382c86125e9429dbae86eab2429b416c243eac61330fa843ce","ssdeep":"192:eIfKn9CnQO+IpuhtGUxGCFIRFrRTGaE0C7cGubaWEOv3Xoc:zfUHIpSzBFQrRLG+7v3Xoc","tlshash":"6432af9fab1819a18729740fe26ad09c6ffb9104413d5c52e2eea2a51bbc34c14fd8d1","first_seen":"2026-07-17T10:04:37.501565Z","last_seen":"2026-09-27T02:59:54.686659Z","times_seen":13,"resource_available":false,"data":null}},"time_used":5553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/js/chunk-vendors.0b5fe90a.js","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:53.414Z","timestamp":1789800413414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /js/chunk-vendors.0b5fe90a.js HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:03 GMT\r\netag: \"84a0f-659d327ed2619-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsEaX%2Bvg%2B%2B2TkUs5DpV%2Fatp%2BgVGfZY9r6AGdo25QoopADsVO%2F6ZKuWPq3w7QYMOFv5TycfNTivKGH4JhCdNF%2B%2BQ3qKXl7cwGtV38tW3gJmJxSiW0r3jMJdBTGWEQeeYxY%2FA5oIcV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2c7de7cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543247,"size_decoded":154981,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"884916affedad2fe505649fd99f1adef","sha1":"0eb3e410ba363f3711fa34323c576f16a9b5f855","sha256":"654135001a84dad6aa5c91cd6f74964d059102154961fcd11be0d8d9c3337f5e","sha512":"3c0e8851026723994071d9c276fd7d0de76367c740ea6b7f216d169781438d24e9cd89cae71f30de6d0949b21a82e6508f94af2ab838ca74bf77e44ec8907491","ssdeep":"6144:w0HUeejyU4DP9CBO7rY2zsLp9NxInKgcnSHlIBYgq:w00eejyU4DPFrqpXCKgcnSHlIBbq","tlshash":"a8c42a997381f45237ebc1eda07b44caf37a3688ac198654f17ea4f6693454da023f38","first_seen":"2026-09-19T06:47:33.28419Z","last_seen":"2026-09-19T06:52:10.062078Z","times_seen":2,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/4.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.967Z","timestamp":1789800414967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/4.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:50 GMT\r\netag: \"4e74-659d32733f75b\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnKNZKPFMGRZ5R%2B5U1c5KQhjdiQRt8QkTMYMgtQRS%2FrFCCEsNd0LzM3%2FC3bXP6XleQqlS5hmlE9pa33Z3K%2B3eRMI1iOvH4GC2HCH50laqg7D19nJg3hH69e2ac7dKhvfGdE5JMnU\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1882fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20084,"size_decoded":20785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f8a5eea97125793ab45e12910cefd03","sha1":"5f4f9b1ee9ed923f88c6066f2a5205c7f85608c2","sha256":"7345ada2db2311dc6f0eaf5bb6f58c494ec619f7550ca363fe90d68f7c22eb2f","sha512":"d9fad48d449d64147c3272e5d474cad709ac7256c83336e20d0aa0f1ea4ad603bd5bea90d8777d40d66dda98f912ef56bc2a666bf00dee7671d93a5dda0a59cf","ssdeep":"384:EcFn9c7pubKPVFZjfNiOgM/gVB4KpOsgAXDtIqyPtq5ukNcTUW88jRJQqDaGXbyC:9mNTFZrNiOO7xgwKjtavcIWJQmaGXbp3","tlshash":"e092d101209feca341019bfb36ea6f46452bdd450e1d4a2fa551bc658b0abc777cc4d6","first_seen":"2026-07-17T10:04:37.436179Z","last_seen":"2026-09-19T06:52:10.078094Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5587,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/3.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.657Z","timestamp":1789800414657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/3.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4805-659d32788bacd\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLMTNE1xPtWlS9lhsjANZ5pD%2BFeV4Cc5BohsCrEHsauQsWMGf%2FbLSN8SHpYQLZgSwvuxG1KsrwXeoo4Ilekx5fCn2LjLhx7UPzb5U9Knzgt%2BekEVAE3PTx6nxgOYWJr%2FZyYwYGZO\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cf9fd3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18437,"size_decoded":8607,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8283f502a709ec28f9813b70996d191","sha1":"afe9254a533df88e58e148ee55222e60f6392b79","sha256":"5e725add4664e940553ce65f53596053a0d8608b769f178e1d7eccffa8c127de","sha512":"15ecb1d97437cd10748376d6e451ddb728fb9fc35647815af21c16f12d40442c73e50f40343878dbbdd012b1210417f5d90814a05a2e3c027f20e52debe73045","ssdeep":"384:WlP4naM5ynU/ePMq4+/gY6PegjD8TDcUBopm+pKSf/5IY:WJ4naM5yU/eiY6P18TDXoHHHj","tlshash":"3882b2ea3b319bf4e486f6fe976224b0be0228fdae428678c3741d15b55245ccd84cd6","first_seen":"2025-01-29T03:17:51.200539Z","last_seen":"2026-10-13T06:04:53.78687Z","times_seen":156,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.722Z","timestamp":1789800414722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xn--ranbet-cl8b.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:46:39 GMT\r\nexpires: Thu, 16 Sep 2027 10:46:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244815\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39580,"size_decoded":40393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-10-14T21:26:48.989733Z","times_seen":238115,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/20.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.019Z","timestamp":1789800415019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/20.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"31b0-659d32715a1a6\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qh1x1HNijpAxYhpWRs8WImeouSxSLfKfDVqf7A4BQ8Qhha%2FT6pUfhfYY7tOMOcLiYvPRW%2Bo%2BJfMRcWpyauLmjehKTdrDkMTFx6dzcbuJHKcGStAVHFa53Z9iW8ABjvOwhM5MAZ8u\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1e853c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12720,"size_decoded":13417,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5dc00a0347546b7781c1e5492b13ad8","sha1":"296bb01fdcab11dc841455adf8700bcf73aad0d1","sha256":"c3175371acf008de95056f58f163297f9253047c09c632e3048b0cfd9bc49c21","sha512":"e5f8c153fd9fc42d86bf16172e472dc44c874b15d21b287b90c79e8a5be27f45385df1f01dc6d496001e9458d689ff313f056dc25b279648d95786e13c02de3b","ssdeep":"384:9lueXMQbUhj2AiAuhivzRXbK45Q44wu3vz:WecYIj2AiAKitXRAb","tlshash":"7b42b06b21b5a0d2ef419774f17871c89fbf716c2d738c44d60e406c69d8e7e2a5920a","first_seen":"2026-07-17T10:04:37.520792Z","last_seen":"2026-09-19T06:52:10.09425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/15.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.676Z","timestamp":1789800414676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/15.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2bc8-659d327839a49\"\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlVs7GNGI%2F7S9F5pht4IwPRDBUoZqyk3zhuOP%2FcakdrqwOEqa7ZFPVJ6kdqzmsHMF9U14e%2BtzBYGZtMCJAi6N%2Fc8kUsI2nd%2BzaqpRt8NVP%2Bb2RXAucpZqMLDw9xpKm%2BTBEkYgNC4\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfeac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11208,"size_decoded":5512,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5ac8405906ce55d04ff2efa2f7be4ad","sha1":"c843d370fe2d8ccf297bc39bff618c162ef73577","sha256":"8c377dbb1734ed46082f63154fa603b284e955f2689f3e2a01e5c296316c1e88","sha512":"0042d0265d28941834feb230e83c02ca8bd5bb97e67b05804fad3d343758a31d6c6c3c53c5b0a90e096694566fca1bda66bd3ef1a1808f1e5608f2a008d7b0ec","ssdeep":"192:JHrabnU8mflTzB8VpNbUPPz6W9EwEyOFfguBnTfQTr3pMqb4N4JjtRdSaHv92KId:JHrsBmfrypNbUO6EvFf/m5MEO4JddvOd","tlshash":"1d32c6cd37b59bedf445f0fea61260583c0a9ce63ac5c82cc3aa0d89a1418548e54efb","first_seen":"2025-03-03T15:40:23.183514Z","last_seen":"2026-10-13T06:04:53.582534Z","times_seen":164,"resource_available":false,"data":null}},"time_used":4859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4859,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/support.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.679Z","timestamp":1789800414679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/support.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76c-659d31b9ba87a\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZTZPsI6JSsmlzl2pTH93knXaOjM58l53XP%2BhpbQoIrrCdBa8cCOryiCN6HnDYVtY82kyWbDDsOnDDpW5dY7iGY4zF69YYuIet4uKaioMtlhLYkvJfg5W1yPBFEm7Jlzst1QBDOs\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfecc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1900,"size_decoded":1498,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf53f727ecfe9e5a3470912e9cd4462","sha1":"5d227278c5338548a79c9d3389737ce32df2cef7","sha256":"b4428bb3921b32a501c632d7ba543738f83b3d7b3dbd6e63c838cb83e7fd2acd","sha512":"011fc2f741230ac93b13f541c612d66f4da71b818432a60ee6898d3fab697740432b34e616dc3517e0938f87fdda4bd386cff55c8d58869f68ce5fbe5efa7433","ssdeep":"","tlshash":"1041663a271ae876e140d3c9d871d095469980fbe8c9c67cca89bf1933450b7bdc90b4","first_seen":"2026-07-17T10:04:37.512313Z","last_seen":"2026-09-19T06:52:10.103009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/18.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.973Z","timestamp":1789800414973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/18.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:48 GMT\r\netag: \"398a-659d3270c27d7\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncbsVJFZXAMMvoyHJvtrFOt15OtjWVkdCfd14vtJr9HkmkRkGXJL%2Fb8IDaUBhRerRiC1XFm8j81%2F5dDNNcE5VO9BCYW6LRr51jfh%2Fl1mdFxaz44QsJtPNCPtdH7r%2FHbI3UVm%2B%2Fb3\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d19832c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14730,"size_decoded":15433,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60a831eed4d4224748aab3b8471ec0fb","sha1":"f3f6cf4d48745ce1a1fd44b71fca7c5c40e9618e","sha256":"1eec0a536e8b4affe5f5dea9278afd13a3419dfa0c8928a2d7d2f42fd2d1fb12","sha512":"4f5a305ec396eae99c191d6c0f356918b2221f107be16964043a73479c11db9b2335c0826ee76b5316f999312aa54b5d609a890bb92388d5e7abda08c530b4a8","ssdeep":"192:06thn87nxfSyu2Pl8pNDxMmFEyQS1YJKowUTVZocCeiD/9imFmbbYDGOFYK2rPTL:3jin9SNYWkmFxmFwURKcCe8/upOFUD","tlshash":"f362d0c07922414a8c294486ece6adcdc5d2688c4632e88de0d485ef2d5ac1eb23de5d","first_seen":"2026-07-17T10:04:37.492746Z","last_seen":"2026-09-19T06:52:10.093649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5574,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/6.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.034Z","timestamp":1789800415034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/6.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:53 GMT\r\netag: \"252c-659d3275c3c0e\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXD2bC0yUDsaWhnqDA9eDENnkOQxF2MhkDNDs6fpR2zw90xQfKqijlpyZWaM0zzHj6twNdoz8MBdNFrFgQ1VDKC%2BxSF9UhSlY6v4pkdHc4Gg9T3z1G0W7Jux4dEul%2Bp8NH7DeP41\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9516,"size_decoded":10210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca66aa8b7bc94e69473fcd3a67b8e0ad","sha1":"e29e94d75a77ce56f9798ab8ff22b62091641931","sha256":"8492c0c5e55d3b2f3e37f6ed742d8066fdd7c97e775480da0a623a456cece6b2","sha512":"f60662e10b3a4cc023665bc5694f135c14087d70c6588d8ad73c92986b84b0fe747a3b126567655c031b5fced2e6f429a7b7236a71aa0de6a55133e67969b4f2","ssdeep":"192:v8jQE7cQ1JqfAngyysL1Dd91rbVlmP7Ox9XdGTdyWyXSW0D8tAKoJ1:v8jQ+cWJqYxH1b1rZlOk9KSSfD8tAKo7","tlshash":"7e12bffe4e1d342b0243bade267f533105f66eb7031ebc025a8778102322ad6658ac72","first_seen":"2026-07-17T10:04:37.51037Z","last_seen":"2026-09-19T06:52:10.075675Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/css/chunk-vendors.be7abf4f.css","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:53.417Z","timestamp":1789800413417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /css/chunk-vendors.be7abf4f.css HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:41 GMT\r\netag: \"1182b-659d32a3ad89d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWP7Kf0lPM2joIugyPRGYnotNEHziSNiYgqrjuFGStLxJeFsrY%2F7e3z8Hu0q6%2BfkTHO8Gox0QbKWmBRLQFOg50vjYYTPhmmUILpNt9dwnxBm%2BE%2FO2NEZVg%2BL2oSScqyeDkUsUHy0\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2c7de7ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71723,"size_decoded":6005,"mime_type":"text/css","magic":"ASCII text, with very long lines (65365)","md5":"8c93f72f700f964dee89cf75e9b2c035","sha1":"855c4ceff2a89ec8ca7f3a38b86d3312f2d32e28","sha256":"c2a13277cb28bfb9fc7b7d609f5b74a4ffed79faf5fee8c2c2dfaab0bf9b26c3","sha512":"573671e71ee46cc0a5e29b5ed464a6dc86b9775bc412655669d780e6e794b631a96e2f4247ccc6f20939607a7de27ee7f692a7b9f035660c93072dd9ae62ad21","ssdeep":"1536:G6uNQ3fdPwwanleMf72yMzkZAP9wh1nAukdDO3Xyr5Ir5eh0dTo:jkZYwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"506329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-09-11T17:55:19Z","last_seen":"2026-09-19T06:52:10.104857Z","times_seen":45,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/330e41bb475c/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.399Z","timestamp":1789800414399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/g/330e41bb475c/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\netag: W/\"330e41bb475c-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3d6a2ce0fe9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86603,"size_decoded":28465,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-10-03T10:56:07.624344Z","times_seen":29188,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/ribbon_sidebar.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.649Z","timestamp":1789800414649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/ribbon_sidebar.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:35 GMT\r\netag: \"6c2-659d31b914833\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrmBe8pkJ1i%2F9kPhsDLahrba7TFRDij4bBA4eoJAdLL6G81biQvP2JWHRrFBFpkgkwKHdpx5qEAnSOc0%2BVEv3gEsXtST6N6JZsK7tTF3RMEFyYx1ipf9gYBOZDndxrcdpoFjb3XL\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cf9fc6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1730,"size_decoded":2423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52a7616b52975087930f71e0ace3d1b1","sha1":"e6cd4791c7fa4aa09e33483840398c4a400dc7f6","sha256":"ec51b3159bf1faa02eb6dbccacfb93573c5ef2f398d7e6d50d6494def99a0b46","sha512":"6767159ec7a39b02df69568818e2e5a184e30325fed09020e01650e240354c5ea900548ba06f464990ddc50401918d13eafb8401a7d8fbab99e64d5caa611967","ssdeep":"","tlshash":"04314d59c332e02feb320daa1552444bbba390499de6d8c5d2c7bb3d1550c3942dc703","first_seen":"2026-07-17T10:04:37.507233Z","last_seen":"2026-09-26T04:13:39.879108Z","times_seen":4,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/banner1.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.653Z","timestamp":1789800414653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/banner1.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:33 GMT\r\netag: \"d5ba-659d31b68cccf\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQSJC65LC0fOUHQhpNXB8YnPxp%2FWR3KpqDX34oZl0gnWQHn%2FhGmE4XuSRrYMAPSV8qOlZUkGe98dhFzsG1HrnqLjzU8fWojsRLNDwaIHEez1cHEiGD0d7mLS5I1vyOl5rRG9X5i8\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cf9fccc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54714\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54714,"size_decoded":55409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38b5b191ab9346c8a8c47538eb771f8a","sha1":"90e9a12777a9b791ca7ed695b1b12b73b5269473","sha256":"83a10fd6d442fc221f12d00bd944f728a97cb64a1c95c22c9fc6a225d8082299","sha512":"1c5af2d91a8cad109cfb70ea0c079e0413d1a74844eee6423c3ee48ad79286b10653edeafe7178eeacff08cd4ff6b90e76d06b350d78d8cae9e618619abbbebe","ssdeep":"768:mFQgYfKg0/kPPD7vTnLObGri1ohtU4h3mopVlnyPAI+14iHKO9tECOEpYMrobqiW:m3g8kvr82tlm6VlcEYO7ECOEZXiHmh","tlshash":"1e3302bcd6feea0338147221f6d85ca219d0e0f4ee8a14b8ed145f9c45a942b17b8ddc","first_seen":"2025-12-01T11:28:00.228847Z","last_seen":"2026-09-19T06:52:10.086354Z","times_seen":19,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/1.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.691Z","timestamp":1789800414691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/1.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:44 GMT\r\netag: \"61e-659d326d09997\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppp4W21x5GLNnbnjqr%2Ftqjg2nXM0DfKoCx1ssFXxDjUI6Kwe%2BUCrF4End8EdOlojpV1NjnbvgvL2B1sky16Bsk1fmXMS9WFE%2BbsZN%2Fw1nFNUwpQmYSS2ikeKDebKJWU9nnomq%2Fd%2F\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cfdffac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1566,"size_decoded":2267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58c9c419907a2dd83709785fdfaef7c6","sha1":"a43f5a8efe4bd42174f81af21d2db3973ba0ef44","sha256":"2de0421f58896bdf5dd3550388723a2cc02f9080d8fbbb69377acfe62c52bb88","sha512":"5db29b35a5bda0ba5530e54c2f83d53e1acb43f68fde30731042dd9bf61a90686696204b438e430975adf214f01e82e999b6244f69efb9914ebe686fff708198","ssdeep":"","tlshash":"6b310ab60cdfd0b1f5f11e2732d07cc8e155bae25967d6915e0be24020d9c7e8a1d790","first_seen":"2026-07-17T10:04:37.509218Z","last_seen":"2026-09-19T06:52:10.047115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/f_criptos/4.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.696Z","timestamp":1789800414696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/f_criptos/4.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7b1-659d326db0596\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUeWYIuIA22gWnZ9FqqRZf9mNjORMijLE%2FqKAkImT6I5dK3%2BHtg8YLRC2s0jEw9jDC8FJa0LZdvKCB2f%2FFS%2FdpiR%2B6ho4Kgxuecv6LNJIDgpcxJwgU4hLhifdHWFXhRhmoSC%2Fmeg\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfeffec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1969,"size_decoded":1740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d986d6a266e2e1a3985c8ec98af30fa0","sha1":"18610422c18bf127f8fc345866df6e4637e97e28","sha256":"8277a57587a02e4fbf4d677735dbbc83752eb9a2c90beb9361d3cc470b4ce14b","sha512":"3c3bdaba549d44574774c36cc79e6c31c809eed37335e42b671475733652f6223c7db2683fecd75199930e6d9d4f024e21e7b072e98f42e974ee9864af20c627","ssdeep":"","tlshash":"d54123ce2770a3d87989c15eaf0aeed4500aa4aa95b742c999c6479cd01fcd5f204a00","first_seen":"2025-06-26T08:34:39.99605Z","last_seen":"2026-10-09T21:02:32.228842Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/originals/2.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.026Z","timestamp":1789800415026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/originals/2.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:55 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:52 GMT\r\netag: \"27a6-659d32751eb67\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWz0op%2Ff1hYvXlhIOwCCnpxwi4vga9xMD%2Bn3gpL6Ez%2FvkqNKBP2ZQHeMLEQn6nFvdlyQFs%2BMpzBa1dobJi%2FpiBvvELDtIBIDHKAUR4GZfx3946ysY3y5TB2wcebKpZZ2HneT%2FVfI\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f85bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10150,"size_decoded":10853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f49d4d12212a85b38ad10bc4114c3ce","sha1":"2063a79a42a8dc16947ffb052ba6aff87ec29cec","sha256":"8ad9fd3dec58f7d0fd22005c682261cabb409037be1f67487c7790fe557ac446","sha512":"5aa159c09d79c215b32c40723114f263fbb5c4df12e3436f54b697e98bff689f17f13f34f88677f5538ce2beb0aee5db7210864dadfc01e30a8fd046e8a4a0ab","ssdeep":"192:UPwFDm7t3GWLNbPN1iE0dH+lDoVfq1NyGS5ZThRKowKvNE:UIE7t3plVspdgofq1NyP5ZThRKowKy","tlshash":"ad22cf2b929dd2dca0093e52b7cd338641e69e6231b8c921e193c3f550752627530fb4","first_seen":"2026-07-17T10:04:37.445578Z","last_seen":"2026-09-27T02:59:54.681554Z","times_seen":11,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/12.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.050Z","timestamp":1789800415050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/12.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"b06-659d327b0b930\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Fl7MiVnTTEbPQlefmBXJAZXb7uTbhYDjvTAt0%2FrVSIwAMk9%2FjE%2BtklFk0Dgxpf5UTa7LqSL9ry4m2oXg6M71KVd%2FpTwCMuiUOF8YcDIoIARdzBlNUHwrXNKTtRkyPyvn9HhquNO\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d21870c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2822,"size_decoded":3521,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6563ecc69e3399d425e35dd5ae7aa97f","sha1":"af73751336bc5bd2883a277094229f7d45033c09","sha256":"6d9f578e2017cc5abdb4bb769161cdeadd6ed9e86dcdc61ed5c16fbce22fe02c","sha512":"84509ae56dba0c85a09869349e00d97bfb1444f312be660c2f75c8b04865147daf91078d7129aeae737098bcbd04019e52f6d3a86ab1583a10b2f95e841a8f6a","ssdeep":"","tlshash":"27517e7a8c3149f6c36d9a1b55f3c04482b33232cbeac0723116d5cc755448142f86bf","first_seen":"2026-06-14T08:39:52.559066Z","last_seen":"2026-09-19T06:52:10.068908Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/8.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.052Z","timestamp":1789800415052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/8.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:01 GMT\r\netag: \"dfe-659d327ce66ec\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=br4hozC4%2FsxD98gslEhjDz4PrIhwZeGJDl3fmUFQ7XrZSYSWMfULuEVoX2WL6VKlO1%2F1knAKhB2hm4lsgJGOJvlvB3ArJrkG6VZgaoinhjvP6z3ee%2FqnC%2BiNwQKKhxARscB0jVfx\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d21872c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3582,"size_decoded":4279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9572d18ee1c9f9c1b79b3ac272f6f17","sha1":"5fe10484dcfd7cce9db1f24a1d33b4a8f3f53181","sha256":"08632011487b645e9c21426e3ead1516ea6d42adbe9887b8bd1af1d95b7c0dd1","sha512":"325dd393c659fd065eb78849608d2686e807c8167c4fbd975def95ca1ee6d99ad043f3af92d9564b06d6750d0941d4ec799b24f13867be7830dc8ed08238631a","ssdeep":"","tlshash":"23716d37896fa681ba15dd2b8e584706a618c8b345dad3054d123feeecd585031ba9d0","first_seen":"2026-06-14T08:39:52.603155Z","last_seen":"2026-09-19T06:52:10.052806Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=gat-table","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.636Z","timestamp":1789800414636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=gat-table HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:57 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcUwIWWjEjEXuyYDErWH2SkTK24gRP8Dca4%2B%2B%2FC4z672f69EG0Y%2FoofTspGLL1oU5%2BhUN2Fuhuj36GZ1mHhhxT%2Bj1RpceayhBphjdCOM8mTJho48PRyW7F8HDPK6KvSIrNVsndRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2cf7fbec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":1226,"mime_type":"application/json","magic":"JSON text data","md5":"038d0d2564f119e013137b9f6e8ab22f","sha1":"72c376003924d7afa9aeb1227449ac0541ef0137","sha256":"a9b28717ad97b12d6d4718d4a94b04e9dc558ba3ed462af68e7958ee9ab735df","sha512":"9a75f1bbcd417b319bd32448419d4754153f55bf4622354206cf473120a8c4bf9033032a68676f890d9f5d1e66d3a2fd33d9b1e942cd262268082e77f01f7ad3","ssdeep":"","tlshash":"8f11a34f6d603cee606334309c9b737efb5c420a95e55a82cfcf5932289965ef128971","first_seen":"2026-09-19T06:47:33.321776Z","last_seen":"2026-09-19T06:47:33.321776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/5.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.685Z","timestamp":1789800414685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/5.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"32a-659d326bd4451\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Taj%2FtIxidOrojwk3cnPDX%2Ba69qpof2fABJdaxrkpBHfqag0IQC%2F5igjIIbsVfjKEPZ9Xv04rJOoCxNAF0kKGn3UjjnuFOclvKKG97Dri2m5%2BzzdReYVBYwvUfh9qTBZhCOXFQIH1\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcff5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":1132,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f8f68f08e56232c1c1a6d66153225d4","sha1":"be2f24d71537fa1cc01c808a9f7135cdac85e346","sha256":"3f248864a76a3db7fcdbef11d5941112e4d26dc477bbc8fdc8fad30e02a71f24","sha512":"91633e25767a7f505582e0e4eb6f80b2c5dfc160dfc96657313bbd1a6c020c5d9356f98f5a58993c00319b91df8914fbff417d9fc8aed449b89889f7bce5eb81","ssdeep":"","tlshash":"59012061321cb16f6508aba90e2c3072746ab8e45728d19577842e3abd2f49fdd914c4","first_seen":"2026-04-29T08:38:26.946402Z","last_seen":"2026-10-01T20:59:50.763349Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/27.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.974Z","timestamp":1789800414974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/27.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"264e-659d327252659\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KNQnWOYN5ASlrJgYinW6R9EEwP3K8INULr8tSCKuGXeGa5jhsHkt785w3QLR5bBvo%2BD0lwa4wJXDPq%2BGYf2jrrzgohbCHcOvOeX6cNApqAPJ8yHSGVISJjWZcpQcD7TOwdtoJ2H\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d19833c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9806\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9806,"size_decoded":10500,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cdf6a2834e8bb6f1ac68e65e0fc3b83f","sha1":"9d1ab6009f446134a93c1e454add3f550d56d424","sha256":"1e5109c60caedc919b66a6e33e626a66fb1de5b93a9693717e6b23b2558bbd08","sha512":"7a162267a339dfb451690548589effd082cb197e5cca8d0d25edb34b9d92bbda2ad13932a9ff27e1332c7ccee659ea3c1f666e998068f8a2653bc5d82870a015","ssdeep":"192:HmOYDVEAJjtYl1Atk6AuW6fiyR3XP8Jz7qQ6Ymk1Ui0TkV/dG/1e:H2xmJuXiw3XP8Jz7qQ6Ya9TkV8U","tlshash":"8712bfc3cf636850de68e714552cb195410db03ea06b84e280db69cf0ebefb92db4463","first_seen":"2026-07-17T10:04:37.467123Z","last_seen":"2026-09-19T06:52:10.042161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/11.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.983Z","timestamp":1789800414983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/11.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"2de6-659d326fd0c9d\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onLyAjFiz13PePytf4VV4P3gxBe2Xe0GDDK5E795XlPlB7qfCc4%2BKaLpCJRbph9RzmS5jCL4R5O0dDzp%2F5xNPTQ7kzWHLF0jDrpXYBE8%2F5Pv7ZWqeo2dtNAgrXcA3d1LR0sF5Xig\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1a837c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11750,"size_decoded":12447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba2e4717ccf23e27ba01bc1a5ca892cc","sha1":"3554662395a84924adb20d0832e2ccd360f9aab2","sha256":"a6eeac585c7b9f6c309826d6289ced1c6e1a55351ce2f7245e4f83195a3dc416","sha512":"4d0e530910cc38232a966635275ad27d1daca339531de29af54003d4b6db08e6b8af7f38934e2409d0b359b713cb867f26695f4020c31ab8ce7ea33254b035d0","ssdeep":"192:CRKvM6EL437DlfgPbgtqiNTLNwRHGLF083UKWWH7YerBuF+Eag98ZIuzKLj804:6LkxoPbgtqo1w4LW83UKWWH1W+EPMI2j","tlshash":"9e32cf45aae4086daa72544c30a512b5fa60ddd9cbd072e37ae13f0bf6b914b83f414b","first_seen":"2026-07-17T10:04:37.544682Z","last_seen":"2026-09-19T06:52:10.116631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/15.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.010Z","timestamp":1789800415010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/15.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:47 GMT\r\netag: \"3c0e-659d32706c8d4\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFSh%2FzQ05w%2FYeUNiAUYOaisUvCM6Hp8j9zUYJrbpRfe%2FCPzBsUZlupPJV0bWXJj3FZAh4sexCy%2Fr6XQthM5mZ8CG%2F9Jd%2BgySeGfcy1RyvW4Ny0s%2FZGY0nPQvQZwAC19qgQCOoXxB\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1d848c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15374,"size_decoded":16079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eec251fd4b75f57f18ffde926d092cb3","sha1":"c24c373c918c78f3820ff3d606f31c2bde797726","sha256":"155ea5530b87ed25ccb75cfa2dfd33c1ae1ef727f9584d16054d75dabaa36567","sha512":"979a08b4c5db72c7814b8e1ecefa70a4caa409c64996506cfa1780d56b90ca7c5bb97309c4f13d7ad424332856f0f518839487a717d019608b27b39ab3f40634","ssdeep":"384:xgEIflSFeMHr0WcUsBTCcxeTTT7AYOwo8f9ZcMrj5t3B+S:xKNz6r0WKTCcxeXvTrljfgS","tlshash":"0762d1474fb77771d41975ec35c4b3016d41ab890c89825d6802af6173b2eca212ff96","first_seen":"2026-07-17T10:04:37.530053Z","last_seen":"2026-09-19T06:52:10.087878Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5567,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/13.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.037Z","timestamp":1789800415037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/13.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"af4-659d327b59f1b\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGjEzkjna2kPga12LEnpXi6LqQK69twfyENPyJtIjajnFM37pXvXyV6J0ubfjWAdaJyl2l0hUpKgcMDjre9n%2BOYRYNI%2FJ3IA0GxdjLeh6ZE3BHcRsPT6jE%2FuPICGyK4%2FDyq2CTRz\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1f862c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2804\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2804,"size_decoded":3501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b0c4d2fa9f4c0f2976ece29d0f194ce","sha1":"b3f92e98bbb97fdbe0d8000e869e2acf760d3f0b","sha256":"671bf84f666d59f7462e363093378bce8d93b269202bc5f81cef6108f7c158b6","sha512":"47043d53c8411b47722aed9a018b1db3e49c5e69281fbfda984c565f66102946b2c08743c1536aa61df128866dfc1541c5bc42e638282cd39c975dad1b135dbb","ssdeep":"","tlshash":"a0511b4c6031c3ed8ef1e90d44dd2702a7124cd604545f62d4a22230f58e96757f92a3","first_seen":"2026-07-17T10:04:37.434333Z","last_seen":"2026-09-19T06:52:10.084778Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/16.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.043Z","timestamp":1789800415043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/16.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:59 GMT\r\netag: \"1358-659d327bacf3f\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUd8aB%2FUQyTEdTxvNaajxi16W%2F4xQCBlhyTAOjbN5hfbAX67cxWX1gUZQ4Ru1xw%2F8rGbsYka8PfrcocJJHVnwhfybo1m6sR4Yiz6y5FHiJXmP8A5GUoNTrSaHfnkA7bfpwWdmj1d\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d2086ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4952,"size_decoded":5648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bda15b461f7786aa0271f117057b5dd","sha1":"c0656c91a14ad2085a39274ac3777672b2b61152","sha256":"0cdd60893c01e0d3eee93c8ef0449ac804470289c881b28f43b5992f4658f84d","sha512":"967aed272226157a12761e2d2ee83cd68e18665cf26788e3fc229809e0af98c21fde367d283d6f97ac08cc8d70d8cf75b70f765e25f02f04ca09072dd736b654","ssdeep":"96:xGPGn+1VArKPgvxikeU26iRVNPgICGS+OuIlUcl8buRh:BrKIvkkZ26iRT5bS+Ou2PlZb","tlshash":"47a16d7f8510d365cc264fa2ccaaab6c474ba25e90047fdee7617c8e7f6e0122951c12","first_seen":"2026-07-17T10:04:37.522963Z","last_seen":"2026-09-19T06:52:10.113546Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/2.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.656Z","timestamp":1789800414656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/2.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"10e0-659d32788bacd\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQvARJ8Qbbr3WqG6bkaZzB%2F8dhf5w2dK4QkTC5%2FHdxjMbStuvXSNSrEp3cncbZg7OW8VnyXlkdRcHLmXFeoUg9dLHrVA5uqFqsE4doo5JH6Jnkf%2F0MZ95z1USVcsXPMtQytH3pfX\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cf9fd1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4320,"size_decoded":2352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9e492227d820ed75e95e09b6fa67819","sha1":"71279a58379f57d7355178416c76a681e98c510e","sha256":"493d4ea12afc62cfb378d48afa10aa21e07ee32157e1db6cb37a62ea82af81b0","sha512":"29da40b0726d4de3c7d0af7ea3308f505128b36e5b1c775e30e00de6b3b0c0157f070d8d1b33ca937a49cf17a6061f6b78fa0fcf7ed203842692a21e82aa28a9","ssdeep":"96:RYW+cS7NZQKGpf5WxQcgjTM09wZnTxMHQRalzPwsl5i7jPDw6W:RP+cDRWycATMtZnTQQm9nQXwD","tlshash":"c99160e43b3c81f6bd16d2db0b67227baada20e18b49c414c7151e2f7d5a00d0cd6ada","first_seen":"2025-04-09T06:18:07.601046Z","last_seen":"2026-10-14T13:22:11.611573Z","times_seen":459,"resource_available":false,"data":null}},"time_used":3859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3859,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/13.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.673Z","timestamp":1789800414673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/13.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fa7-659d3277e6a26\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h53TZHbwxSNtUWfarwcigTV07OMMc8iga0bSu%2BTaoZWLinL2ZuoYQbd2cdq9POyxKG6D5PXngPDUShAqp7JM8SwE6gWqTnkRWDdLAYNCBlZAtBHvx8vnU2NjN8wQd4v%2F2M8CXMSE\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfe8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4007,"size_decoded":2378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"381d1eeb721c703b18e45c0ae46a6a48","sha1":"d8370e1e0aec5bf722a7e48154f87b85d3f3a7a0","sha256":"98aacf8aec3e4d5407992758cb6ab696de92e1b14c97c6c7cd035897dfa37ad9","sha512":"9716ac738718b54e05f3b616a8a67b043c5585c142bf72acc293f6b0ca7219d44ff3db4c4d80b1d7bca176d7c31e6ff2b57c50a51f5d4711587630761e735f2c","ssdeep":"","tlshash":"1781b38933e8d378b525b7fd536a60367c0768ca7510c124cbba2c44798151d6d9ece7","first_seen":"2025-05-14T00:07:15.972016Z","last_seen":"2026-10-13T06:04:53.595019Z","times_seen":103,"resource_available":false,"data":null}},"time_used":4859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4859,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/22.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.968Z","timestamp":1789800414968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/22.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:49 GMT\r\netag: \"351a-659d3271a9349\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekh5%2BMf45bZ%2BJElcmQFr0gc%2FtSNs06uZnEyUxC0GW4icHskmErSn9ri3hO5TBffkFAkONmkNs%2FUQr%2BO6sHCruj9Y%2FF%2FcX%2B65vgxc5Hdc1twVVAcU8KmKgkkzQLZL69HVwnIy8srE\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d18830c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13594,"size_decoded":14301,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da541edd9b2412921f71f88d6443c691","sha1":"6762d270447507da4fae59a097e91ba705829e84","sha256":"aed334bbb9c5441bfbbee1a4169ed6fcbe524c443ec2d0b08ec183c327c74845","sha512":"b5b9d992c6559341c33d8102f1446f347409ce801bad0d821f154137be1f23e5b5b4a2080cf00c7aadaad222b48d23e913048b7a2626e21f53431ebb644d0673","ssdeep":"384:MDqk8fYvpUhNki7m+p2ugRep5hdoQJutOsV7jyu4Gi:kBUfzK+p2uuep5QQ4tH7jHi","tlshash":"4552d0b4a24239a3cdf809937862031cfa15674b5124ed4db1ce4f13bea67d0b37518d","first_seen":"2026-07-17T10:04:37.427444Z","last_seen":"2026-09-19T06:52:10.117147Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/1.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.681Z","timestamp":1789800414681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/1.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3bc-659d326b35553\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbEPXwdDHeqQ2CwazRkQvcgE8sQNCQhAD5eUHMCdigA94nvM%2FP%2Bqs8XtEXjxJCJWpj1URxRzxCSRjK9F1FHp2zpWlERxDMn4ZzRk0ZonHsAjeReiWVQYVTqwt0WHz2qAUfTJNLEX\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcfedc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":1254,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e73cb1b222d746763a3d57ab92c94621","sha1":"5123d30407945bdb0d480562ef9c772355d3627f","sha256":"97b17effe940e91f0bd16f9bcb9816b304d7d12bbb192a0b33b6927944946458","sha512":"580fbc14a67558676750b29e5b5e7134dae452f3446862b7d7673a7e2c0802d3bd0e8062a26e945c39533eb5710ffd151f65cd2029d2a4ffb0dfec74314f27b3","ssdeep":"","tlshash":"181161de12749548a98f8d2cfb2bbc063012f1bcc52e9ce4aaae6c4870c2ae13110518","first_seen":"2023-04-15T18:12:28Z","last_seen":"2026-10-09T21:02:32.243058Z","times_seen":236,"resource_available":false,"data":null}},"time_used":4863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=save-initial","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.275Z","timestamp":1789800414275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=save-initial HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulqd3E4nXoWsQssgjhL%2BTBuOi5BUQimTvxH0M6gN1mlPdrjBNZ4OS76QS85otMq6CHtTuphThEx3ItUJnfgvoqHq65a5wyneF7A%2BilxPXivPY5HAc2x%2FlFJWCK5p3njd63eKkIYb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d6a2cd3f0bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"oama2f1abjq1lbcgnu045jn4o2","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=oama2f1abjq1lbcgnu045jn4o2; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78,"size_decoded":1002,"mime_type":"application/json","magic":"JSON text data","md5":"a8d183efd6a12465373fedcecdfd607e","sha1":"5cae373d2a938d2e643ae0c19dc99ae6e16f40c3","sha256":"ce081a31a4c0cd5ea91a4c1326538b417ada2857e638df4dedd48941668f72a0","sha512":"e355f1004f04b584a68844350d18c2e135d64b56802165f06ec674c2a48e84afe3e4f50755ba95cd404317666617db8bcd90e31ea3e1f841157b72c621b4f550","ssdeep":"","tlshash":"fda01108080fe08b2e2aa2802c03380c000a0020c2a08020c0b3ac3b800888ac820088","first_seen":"2026-09-19T06:47:33.339803Z","last_seen":"2026-09-19T06:47:33.339803Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/criptos/4.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.684Z","timestamp":1789800414684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/criptos/4.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"27f-659d326b846f6\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFeHeSw40HbMBX%2B6qH6rr4OhNx8UADcl99PvduDCU2XA%2BkNRlEG0qRM2fkq%2FVLGrtv5O7JK2ob76rI1tzajwiPn35hUvHlvJnMnhlp68jIQJwoKrUC%2BIooByTx0tgMQN5ocq8nyB\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfcff3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":1084,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bab137e0d87892a339049b5ddbd40d6","sha1":"c4e6645f571644fc5c87d411387d5d95d0ec4c83","sha256":"2746ff69b5e774b4d280343bd93e61f0bc178c558e54344048478676aeba06ee","sha512":"c048eecf22506e362e91f8ce38c341539d2ff0e79f767e55919d26f6b207f0d444436a1120f613be1af28099c31bee946835ade2151f98af85adf40a0c7e6327","ssdeep":"","tlshash":"8df008ca6234d4c14872c25def7f1f49357760eb52490686f07a6a0ff4430d6301509c","first_seen":"2025-12-23T09:56:41.079053Z","last_seen":"2026-10-01T20:59:50.681475Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/sports/4.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:55.041Z","timestamp":1789800415041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/sports/4.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:01 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:15:00 GMT\r\netag: \"a7a-659d327c48b76\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFfricQ7%2BKqX3bxY0bY0M9y8Ti8KCNdYGzmN7kxLLGT702AX167%2FgX7J3bEKUXwdVInsaAJcJ9aDQuIrVdltNHdZWaXXd8GclTq0%2Bw7UDR57VRfHTIt9MOKmmuxjjtp19ZaYkTiM\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d20867c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2682,"size_decoded":3379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6f8071727a0e264bb16f4c0ef27a102","sha1":"38e97629839ccd4a0890e6e8448f38e66ecea124","sha256":"6c591f19c70689974f5610d761d5aa3e8497fac9d16cd4b1637a6f8dff5f5368","sha512":"db5feb0de52b040f4efaab68accbf876d59f8851042ea64e2fca46aedaa24c0b2707cbf8ca97ee8cd9736176a690dc979ee58b6bc72effdfcf2a243da4860516","ssdeep":"","tlshash":"94516c0ec02527bbf8cff70ade04cd09d184b92d400afe1a7580e4b99232b64c3c9191","first_seen":"2026-06-14T08:39:52.579372Z","last_seen":"2026-09-19T06:52:10.095454Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/api.php?call=get-key","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.640Z","timestamp":1789800414640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /api.php?call=get-key HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:54 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WmNnNm28zypgqDQI3HC8k1Pym5HgyjwBMy3C4cH%2FXKXvg3vKfI9ulb3kFTg%2BqLSugqSZPJA73N8YYdBdwjsW5%2F5qcIK8j6dDf20y9GjbhnJTExudmI2gNmiN3P0iQszSFo44eiw\"}]}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2cf8fc1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39,"size_decoded":901,"mime_type":"application/json","magic":"JSON text data","md5":"73f2b417634d40dcf6329ecfabbc6268","sha1":"50a9b84b4048f73a6778acf0122d3e76c4cef654","sha256":"c65451590fedeb76d05a2378c73107df3a9eb0fe25bbb7e324db6e75bb483eed","sha512":"4c354ecddc783ff1960ca098da906eb85b6116bcb522601791ff0cae4219ae59ee994a2de8d902a5c5cf6e564bf1e20497e5dd524a00f69c360f007e0909a7c8","ssdeep":"","tlshash":"c7900435005074f1c055c034031103157d050313540c104c51415401554354f3c0511d","first_seen":"2026-09-19T06:47:33.345557Z","last_seen":"2026-09-19T06:52:10.049159Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/1.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.655Z","timestamp":1789800414655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/1.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1633-659d32774408f\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrdBHfBZkVIpBMJnEIc9KlAerBvZdaLbBtLYoWeDLYmQHmBAQQFJNnFsBVb4MhJJNgHfxrF3rH0MBLYq6zvS%2FDQX%2FjhuDL%2FSJCVj8AQprKFnnb1mI9Iiu2jBUo9HUgDfhHqFQdND\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cf9fcec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5683,"size_decoded":3088,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b31b092f00c702489a618fb4fdd6174","sha1":"a3e2b10c43612c1f529609c363c88d431f990072","sha256":"47488ff50dbd386295032bbd372070c103a1c931a8a2390430c987d831716604","sha512":"f89672e88175d5a5570f274c21f1d5316c42b90726a33d1ca82f0fad614216edcae0c2b619463427fab311d99e70c7f533b2f2bf2d8ae42ff6896db45eaac5cc","ssdeep":"96:G0rgUZdAcPz1epFEGp3Bj5cID3xqLHcKc2tftTJBiLp/XjW2eUjB82Nwk7q:G0MUMcPz1dGp9KHcKcijiLljteUm2NwF","tlshash":"84c186c827689bfcf801f3ee67011868756570fe7ab28765cb2e4e2876468bc5e05cd1","first_seen":"2025-04-10T04:11:56.880812Z","last_seen":"2026-10-14T13:22:11.832954Z","times_seen":399,"resource_available":false,"data":null}},"time_used":4877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/icon_telegram.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.688Z","timestamp":1789800414688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/icon_telegram.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"306-659d31b7d2bb5\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2y0n2bYnnCFcfVhlXVcpFEbmAAHU%2B%2B%2FpOs11xke4XFuymKQVZ68AMdhKqeWNwe7QRKOBF5pFytobKZWH%2FbNsDssTsX0t9uNHhF0cmiyc15bahaiW2cPVHNmkC1JhMKnfp1IEDOSX\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfdff7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5c34ddd7be08c7530a567d6b97eb32","sha1":"9fa4861cca959672891ed697b3af0bb55f6778ed","sha256":"54349a1ed20e7709384d0b4847e1b8d6d3c064e6bc28bb3b19e8ba833caba5cc","sha512":"392bb47f9acb8622e4fe0f64ff585e0e4e4e91e09e932cd586b8567f6bf7ac28e8e418e6772596cdb6a2a27a2ef1dc9e2a301df065efd2c004f5e9ef67aeadcf","ssdeep":"","tlshash":"bd0110fa32ec82d15b0e8710a876686ba90360f70a4c008c778c7ac96f4d8d26842e4c","first_seen":"2025-12-01T11:28:00.255154Z","last_seen":"2026-09-19T06:52:10.054187Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/games/6.webp","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.981Z","timestamp":1789800414981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/games/6.webp HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:51 GMT\r\netag: \"3676-659d327393336\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVVVgmx221YxMG2HZWizSdOkO4GVpOe8vFWflUJbieFP%2FFN6EQPF7a07MqAFvwgDhnenCQWjqN3mRKpW0olv6ihxcOdcxZOUn8vatXYEhaAM%2BzBz1Xbj%2BvxFLYsDK1S0ITm5e7JA\"}]}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6a2d1a836c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13942,"size_decoded":14639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x447, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79a4d70e1f01bbdaf87ceb3ffb614603","sha1":"22d44c47273914ebb386d0e9b42a81ef08c453c0","sha256":"b93175d263655ec74c4bda1f91cdcbfd6c7137a1068d4b92fb53171d919b799f","sha512":"c688ec4961983578c6e0fa87e2a4d918d978b7ab3b435e90e64f3a2230d0963dfef7276c083836b308480037f4bcd95e8420b3d5b175775ac583385155c759fd","ssdeep":"192:XeEh7yd5WFslbMODKGGHoK8tZXJ7xxmFnYJe52IbJt7a4pyj+2HbV9jvKMtnmUqr:3hmaFshDxx4nYJ0Xa4M62J9GOnvVla","tlshash":"c852c182a2b49a2cd3ea1ab314e646216e4654f4497041c17cfb1483db53f76ab0baf7","first_seen":"2025-12-30T14:55:49.057254Z","last_seen":"2026-09-19T06:52:10.051309Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/providers/12.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.672Z","timestamp":1789800414672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/providers/12.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:47:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:14:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3c7b-659d32779555a\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mJEHLGvARJxR2VY5bxKjcP%2FEaeZW3NvEMYYbseNioO1Fh3RqA8%2FcH4ptyckcWb9ZnEg%2F%2FpcyZ3DQTyjzWzEwMfGVcFqFm3xBjfp17bIm2eWMt6%2FJeKOqk021hPAVCUEjKK6E1kj\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfbfe7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15483,"size_decoded":6760,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f0e616e3e19b99b55fa12505820cd2a","sha1":"72bb7e1f0580aa6a0308de40440762c88078f813","sha256":"5208ba82778981e912fd3d42f623f5a713fae642216b0b2fac0f242e1561cfcf","sha512":"25dbe0c851e82cb74b0860e86bb6a3360f6ea162f7834b1e2bc21b158c416c3ac8a3b5c6b4842f7e2cca22cb2333e031d641085831de3bc072641b4d2896275f","ssdeep":"384:3bTEiiKzT9TJEtREb3PC+crkesot645TZ:3bTEiNT9dUSfCrps8nTZ","tlshash":"d66294c42374e2fcb408f3fc8717a8b0bd466de63911e468c3a90c95e69145d8ea6ed7","first_seen":"2025-03-20T12:05:08.602569Z","last_seen":"2026-10-14T13:22:11.622904Z","times_seen":165,"resource_available":false,"data":null}},"time_used":5566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5414,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--ranbet-cl8b.com/img/icon_instagram.svg","fqdn":"xn--ranbet-cl8b.com","domain":"xn--ranbet-cl8b.com","tld":"com"},"ip":{"addr":"104.21.81.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--ranbet-cl8b.com/","date":"2026-09-19T06:46:54.690Z","timestamp":1789800414690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--ranbet-cl8b.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 13:00:25 GMT","end":"Fri, 11 Dec 2026 13:00:24 GMT"},"fingerprint":{"sha1":"78:45:9A:2B:1E:6E:33:26:FC:49:5C:7B:8B:CE:A1:F7:A9:8E:50:4F","sha256":"BD:69:52:0C:2B:0A:86:1F:EC:3C:6B:FE:AD:5D:40:A1:A8:AF:EB:96:D2:2C:CD:3D:54:5D:AE:D4:04:3B:FA:83"}}},"request":{"raw":"GET /img/icon_instagram.svg HTTP/1.1\r\nHost: xn--ranbet-cl8b.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xn--ranbet-cl8b.com/\r\nCookie: PHPSESSID=oama2f1abjq1lbcgnu045jn4o2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 06:46:59 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Aug 2026 23:11:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d08-659d31b783242\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xedTqBuaiOTe%2Fh44WI2wAhRsq3zmDR5t4%2FjLPWLnU48YAjdxjRWR9HTQLn2gzlD1jXrH%2FoXu7JuEr5jsbNUZrLduA36zECT0WElmjcIBsVrEv3GSXsUkDLEiUdV%2BMHQErID5qcLu\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a3d6a2cfdff9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3336,"size_decoded":2031,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f469f17f3506e861e7389782e8770452","sha1":"eaef98c831a54fa8f7fcc2612408ca8509ef6da6","sha256":"bff5506e8ac4fa79cda1649d5176c1eabd04dd7dfce02688d6b2ea3257a7f21d","sha512":"8cb81645f2b3f5da92920d97d842190abb839e12a6bca3f184ac2b3624f2e0ff21393634a9b76a9632925c939be785edc6c24eee3a7a6eec51c2baf1ae39d1fd","ssdeep":"","tlshash":"2761f0e7b7c4e2e4b007db69d4322db27d9f34b74f858285b24e6610b7219e188cec54","first_seen":"2026-07-17T10:04:37.555029Z","last_seen":"2026-09-19T06:52:10.080336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"xn--ranbet-cl8b.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}