{"report_id":"61060f8b-d6d7-41fb-94ec-e31985ec9211","version":0,"status":"done","tags":[],"date":"2026-09-08T10:06:19Z","url":{"schema":"http","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"172.67.150.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"title":"Rainbet Casino – Register \u0026 Get $1,000 Bonus + Rakeback","dom":{"size":536813,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63369)","md5":"7de1dd7de14ea9118aa8d881b7f9962d","sha1":"352beeb05e0b001e33204a278d38889cdf906002","sha256":"10680240d356eafa203891442963e977881052019df7f99fb3e1b55c343479ca","sha512":"56a1ae5216af71e96dbefa303d584dd92acb5e9b2fdd398aad95715e48764f622e5a982565b084d74039ab70e387008063f829d86a029c9fdb4a7b7bef5dc6fc","ssdeep":"3072:NzmudYY2TT1Lefj0MyjJ47yZABy5ruf0UA0jXp65jDBZGeb7QFkNeNwNnNUNfNWf:ALeby7J9bUFACcNwFaU1Ov","tlshash":"44b43bf64340e27e1503c3e3fa245915f2d7a06dda0369c6dfecc2589b83da2ad6468d","dom_hash":"domhashe51b26b07f0d0894f263d6c7e5190538","first_seen":"2026-09-08T10:06:23.183433Z","last_seen":"2026-09-08T10:06:23.183433Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"172.67.150.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T10:06:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":93647,"sent_data":1668,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rainbet-casino-au.org","ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-09-08T10:01:48.5575Z","last_seen":"2026-09-08T10:01:48.5575Z","alert_count":244,"request_count":122,"received_data":3352312,"sent_data":78919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":3108,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d17944fa25438921c8370a4f023eed6","sha1":"32ee9c0a4fd4a99f82dde337e28c122aa5f10a61","sha256":"e769fcc2a0223a396385c72e4e534d8d56435c801e7c20982aaf5edae54c0f63","sha512":"d019f5cfaba008973a27793a2560eacb3ed76204404f6b001a827f1fbf91a5c49eb19b2931320e228de91cc940ddbc290a95faf4ede2bc7530df4629fe30a792","ssdeep":"","tlshash":"18f0971cd16415c6086229a6a5a8084aac0740836dc030babb6ec2890f2b3677df740e","size":512,"data":"","first_seen":"2026-09-08T10:01:53.543431Z","last_seen":"2026-09-08T10:06:23.2842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecc6478d530c8f5f68e66ecbb15d3674","sha1":"6d6f7792b0a8497217c78305dee7c66f3203310d","sha256":"95325de73d3ce2cbc50601a5a280c80b1020c75344774f2c21484c883b96e3fc","sha512":"6a729c488e3775f67e2fb71b3cde956bfff9d30db905df1d59dea28d50b7348d5d7de9a780ddc1e1f324a47a9a950fc7d25cac88d4591949411fabb84bf9ed25","ssdeep":"","tlshash":"16b012a3083a02400a4113d414835000485c19d5318280d2ff4d40001f815c700327c8","size":93,"data":"","first_seen":"2026-07-15T07:58:47.850003Z","last_seen":"2026-09-08T10:06:23.284749Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ff422b2dab1b21441e12b0ade63615b","sha1":"6148e312f4f8356786a05b5deb6b76e12bbf4a2f","sha256":"0bafe137e04091c0dc6e38d38b1a163afa8134e9c50d169a69ec8316f8419e26","sha512":"42177dc260b1ccb9a0bc2496831874623421514bd81059ac0bd87b70f8cc2030d5bc2ca4ed2b0b1dc463f8543a9744032ba3cd9c85d0189182ba38fd4cc460a4","ssdeep":"768:P9tZRDpIkRLYIV2BhdGXyY3x1MSXby6Xtg3yjMXptoDpkzhzazubvZ8GVmSMpeFc:dRDpIGLYoDpkJSQuEnJrpk","tlshash":"96e2e860b764147a40da0eefb08b6a54be7614c27441e0e1697ecc881e97d8336b5fbf","size":31206,"data":"","first_seen":"2026-09-08T10:01:53.545174Z","last_seen":"2026-09-08T10:06:23.285259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T19:31:44.460668Z","times_seen":432054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/gates-of-olympus-67fd2b83ddb66634811640.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.201Z","timestamp":1788861948201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/gates-of-olympus-67fd2b83ddb66634811640.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"438cb7f54ae4f2d377a450fb6c5dc6a6\"\r\npriority: u=5,i\r\nlast-modified: Mon, 14 Apr 2025 15:36:36 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000006f77ecd296dbe6ed-006a9fdceb-2e376fd5-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Myf4OvmbJtyBKcZUQYZtF9qu%2B2tTW3MbfsmhawdL8DVMZ38jPDukVTWU1DNv%2ByEQpjwfVPjepsUcMOzFMsKtfY4O7EcsZGadqzfHrniUWQw0%2BUaLvIltGYbjUFkUiUow8mbKHvA7Zr0%3D\"}]}\r\ncf-ray: a37d23084fd7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":103699,"size_decoded":51256,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"438cb7f54ae4f2d377a450fb6c5dc6a6","sha1":"ca7ee565f1d874a4c123b220e7123c1202ba3122","sha256":"f0192bdc0c903101d92d63fafb8424a4b29043d2285764960460da0e4f4be8f9","sha512":"c96e3cf5a7a4f8d5c1956fb8210d45fbe13c07a6af175855773a89678f575932b03cf1db7a71275c19ef8c4446d1fb06669f6947de41d566a73576141b5f9b50","ssdeep":"1536:Euj/PtE8GV4zo65LtaSD0WXCHG7P1rzc2DlBuy1uzQVQU:E6tE+aSDfXCHIrzXBBuy1uz+F","tlshash":"f9a38d7a93473b1e5b4206e6294df30c1c281bcfee3a58d7aec46096cfc8e445b67468","first_seen":"2024-08-20T00:53:37.775346Z","last_seen":"2026-09-08T10:06:23.188713Z","times_seen":62,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/book-of-panda-megaways-68593fa280e74683711496-685d5f118c6c9915968114.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.212Z","timestamp":1788861948212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/book-of-panda-megaways-68593fa280e74683711496-685d5f118c6c9915968114.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:54:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"19467ba51bec9ddc6a0315899b4f1fe9\"\r\nx-amz-request-id: tx0000053aa9799fae4fcee-006a9fdceb-2e3788d7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCDD4YByKUc%2Br7nhmc5o%2BdmHsUWyaJ7rQiUrPAISkRjlITyN0oMwzxqGXIhw0CXc%2Fb%2B5Q9ipAzSVjzannGSWzi7ZndrpV1F9WsyvP5FXUL6FlB%2FYNVQNz0jd4zjx5T7KD12wzFvm%2BI4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23085fdd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18470,"size_decoded":19442,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19467ba51bec9ddc6a0315899b4f1fe9","sha1":"3236bd5e3af651bd4e682f08e9790f1b8b2cf1d4","sha256":"4661f513147de97d8e00f11004122153e7b4adbb3d81d7296a1c10085304b8a0","sha512":"73de9f434d6cb80cd844a9aaaa249f3f5c75346d2a2ea63135505c705a6abd449eae38e0fe6c9f921fe6f5c9b45c71bccbd794fdaef9df8443496ad82704adb0","ssdeep":"384:XSDR8fGFgVIwKAcDHDW95LDoniTRchTF0kDk:XS98fGFQGnDqL0n0SF0/","tlshash":"6a82d1023a5bd0b5fe8466371d91aa63f37ad6075f5b730322f1e2c6d5306b94b18087","first_seen":"2026-07-15T07:58:47.825431Z","last_seen":"2026-09-08T10:06:23.190655Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/go-panda-68596ea110a2b587162211.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.268Z","timestamp":1788861948268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/go-panda-68596ea110a2b587162211.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 15:11:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"97a18e90f0f395388a927b7fc4019730\"\r\nx-amz-request-id: tx000003811fd1ce9b9be31-006a9fdceb-2e3a17e0-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mogS01%2F4YQ6UjwXR%2BgskbzMb40avOdali2i9Fwcey3hEdKQ4vP5OQDTsiKIrOk7nTjIA84FjKI2woajZUiihyPcnyKLim0psEppDdhIJfLSes2cD8sfYyV4w9rBDsaZHtdkslgOoy9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308a806712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40168,"size_decoded":41132,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"97a18e90f0f395388a927b7fc4019730","sha1":"666892095e1234ff8512d702e2dc210dacaa3434","sha256":"e8513f0cf4ad59c213128be8470e9c2c195aa388843c838ab47c103037f454ac","sha512":"eff11218a628f5f3bd3010dc857765de322b63bfe232dfe676369968db5c27d525fc4ff6ed9f96f0090d825da0bbb2fbba0aedd8a7fc7967a1af33c0edfb1de8","ssdeep":"768:QsoamR1wODW6utho0CaYOUhYI8hA9eFMBcSDri2EUCulpOWFm9at/h2LV:Q3t3wkW6utSOkr8ufrDCuvOum9E/cLV","tlshash":"5603f245e1913b29a2db4df6739b8c0251ba3d7f9a53cdde72d510bc32c0e481469674","first_seen":"2026-07-15T07:58:47.751667Z","last_seen":"2026-09-08T10:06:23.192292Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/cash-vault-i-6859832fbdd13109886979.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.275Z","timestamp":1788861948275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/cash-vault-i-6859832fbdd13109886979.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 16:39:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"acf87f7f660aaba626b9891e7c745a5d\"\r\nx-amz-request-id: tx0000034c42a062235f127-006a9fdceb-2e376fd5-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JH5GaDa3R6163eFBpBh02oR90h39Ca8ASN43b9lxFshlOggYFawmS3Bv63prPet5nWF2di3qYdmpnb7PhWxk0ietdf9nbKtym6B9nNLuyAllmQjv%2Fodwo2gEIpWLc6rMLrNAXQnsmpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308b80a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30994,"size_decoded":31956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"acf87f7f660aaba626b9891e7c745a5d","sha1":"ac9e8a5dbee05e5e9338a09cda2839fbc39e4bc6","sha256":"74fbdc2bfe67f2d03d5403c3c0a6fa253dfac575e0fe48f184a461cb4da036b2","sha512":"14acf7bcd2d0bca5c17e205d030f18e81ee05497a58413dc03e1d147d5b7a82a0153e13b3a112597b1aa9265c50f04d2b1e09b7b598a1d847f2407ab7c0ae074","ssdeep":"768:IHhSoLycZ/w+Oute3FfcVQHeRzzn0ona+z3OQ:chf+cZouteSVQ+RzrrL","tlshash":"ccd2e10f34a156c43531768011c193d3d96bd23680a7fedc3ba94c6aadbb167a4dc7b1","first_seen":"2026-07-15T07:58:47.811516Z","last_seen":"2026-09-08T10:06:23.195174Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/french-roulette-685962c79c672267349937.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.281Z","timestamp":1788861948281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/french-roulette-685962c79c672267349937.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 14:20:55 GMT\r\nx-rgw-object-type: Normal\r\netag: \"877fc6c055d9a784ff3411dca2dd6587\"\r\nx-amz-request-id: tx00000633c92552e65799a-006a9fdceb-2e378774-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEP5k8irkg2dhgpl05ktOoF3alj%2B1jkehsQN2MmRjM5fcfo5R8YFeld%2FsTHpALgdftR5c5uIfvIZPKN1cfG%2BjEJS2CBW2bqSLW3JqHtTyzlF%2FVcI9Lh2Wbd98UTUl8Osecn73g7yW2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c80e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19748,"size_decoded":20716,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"877fc6c055d9a784ff3411dca2dd6587","sha1":"141b9cdeba8350de59887c6bbfaa6674dd6d97a6","sha256":"d753ccdf9e765839771a0ff28b6cfee31ae9cb29ef7049e26bbb7f5fcc1b07e0","sha512":"bf69df55980b1fe41e230027505038c9e61422ce0b5d9c20e804f6309e7c157fb5eb850cadf98fb0eb4d392a9e67b8a2b653bd66860a167a2f826cbbc8d782f2","ssdeep":"384:snv3EspPwLRrqiFM9knoaF8b626H0Xr8jhdikf1tjy36nP39JqbfmgNFTtQ:snv3EUodrqiSQ4b626H0XEhwkfjy3UP5","tlshash":"bb92e1e15fdb62530a00c0521b30d5ff7235da9a9c9b57c1fcd1cdab68cac07a878545","first_seen":"2025-12-08T06:56:23.155311Z","last_seen":"2026-09-08T10:06:23.197532Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/blackjack-neo-6859697ee55f1774239777_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.841Z","timestamp":1788861948841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/blackjack-neo-6859697ee55f1774239777_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:44 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c9c4b60f96f5fd1b097b6ac267bf6832\"\r\nx-amz-request-id: tx000006baff143a952feb6-006a9fdceb-2e3788d7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IG87evP%2FTAgLxr0GvCVMJG9qocbpv12R%2FEmU7UgWF1wqayhvgCmPK0scb4VyGxOv4nPYYAsS08iNm2KHqLPMql%2BbkL66lyBrQ81MDjN5aHVFYZGzGsQiNuJh89HerppnKRrr3f3c7eE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c48b3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13232,"size_decoded":14198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9c4b60f96f5fd1b097b6ac267bf6832","sha1":"753f3152d744309370bee7e0227994de4b1718fd","sha256":"992ec030cb9fa270270a3a3cc26393bc7a78f49b11f9c2df66ed17e43e7b87c5","sha512":"78896db1c04810916b221d74b1782ec59394187bdca7764f3007f1812c220ca490823b57ed4f5a588a24d0df6d132e9a6e409ae7ede985292d13c92ce64269d7","ssdeep":"384:BOwvSTy7ErXx/4Y5yTrJf0jyQKsF3JGHQC9f7/c3QztY:B7l7wXx/4YCrR0jUySQWk3wY","tlshash":"4b52cf1590c1429543f890fdc87fa76812f24d490f58becaba07b3b98bfc5d99ab1684","first_seen":"2026-09-08T10:01:53.444273Z","last_seen":"2026-09-08T10:06:23.200249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/pilot-685912eba8e0b993836321-685d58f1ef7fd513729669.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.856Z","timestamp":1788861948856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/pilot-685912eba8e0b993836321-685d58f1ef7fd513729669.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:28:01 GMT\r\nx-rgw-object-type: Normal\r\netag: \"782934edfa05df95ecc70b6be28d2d8e\"\r\nx-amz-request-id: tx00000dd6541f3d008601d-006a9fdceb-2e3787dd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQWcUbdGQiEyk0MWpMQ%2FIpDVkkFSUpZkLKKUZXKZ6Z3tmetIa0KLEkcP00%2FmVu1880UMTzegcp5yRxzeLOBgXL3LQ6qOon6oHUEBP%2FWIwaB24Hchezh3AHnqNYMaI9Myps9FV8YuXvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58bd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4374,"size_decoded":5339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"782934edfa05df95ecc70b6be28d2d8e","sha1":"cedca9fa98a958d4caad245aaba7fc3c25b26a93","sha256":"1de01074f979dd8ba643083edcf0822b069d153340647bc42f125621db222774","sha512":"bf7c4c755ea57a94c0ac08830d42e083e64ab281e71106ce3a30b218b8ade92ff7973d91f17ca383f34281de5dc379dbab74484d17757ee44014337fcbd1e5f4","ssdeep":"96:NZIfs4sEZKZtaC/S7XAvG8jl3bFs1bkWb+1QaZz3DFMWdXaY:E0G8KC/S7F8jd5mbKQCxhtF","tlshash":"b6916e86ab82b16ee63742741a13ff88c156cc26b343912b55e384b5acd4633fd6b426","first_seen":"2026-09-08T10:01:53.440328Z","last_seen":"2026-09-08T10:06:23.202215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/buffalo-king-megaways-686d26340ec6f060939946.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.784Z","timestamp":1788861948784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/buffalo-king-megaways-686d26340ec6f060939946.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 08 Jul 2025 14:07:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"900200005e50bd70aa58dbabae9da50b\"\r\nx-amz-request-id: tx000007e40ed68b8432519-006a9fdceb-2e41f610-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2X%2F2VZsvuAxBasvxgtdkMwXL45hllXaVZvmx%2FAZGg1xgU2s%2BLDjB4HoCbDwO9L%2Bg8wcr5LdAeEceg9WQsoWALdkzUndM1EXa4m6eyzE8iQorzzzPmvIKp116e5o2Iwx2Tpcw72Yimqo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be894712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10502\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10502,"size_decoded":11470,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"900200005e50bd70aa58dbabae9da50b","sha1":"40b9278ebc5f8a0b47abda8c67c166afcc85ec26","sha256":"7c3d30154293a3d2b8c833f021e2f9719f62ce10823e7f1c369b0ab73dabfc22","sha512":"28acb6c61c03b8051c355521ec7decccd7ff8d6a738a4e2d2b926b9e78d8d03182bdbc62acc4fd1bbd3f8c979cc0dc567b95d847c6a793601878a98bcb908a39","ssdeep":"192:pO4LhK8SaNDG2BfHFCCZTytSnOO+qcVkYuhs7Rwoz1GHwtHnj7EfUEaQ0dP:rL7SoVHF3l26OOnG7Rwe122/krq1","tlshash":"ba22cfb029af73b3c205d0f814d4c9515d258cdc578fee9f809abea96f436848a4ed61","first_seen":"2026-09-08T10:01:53.389146Z","last_seen":"2026-09-08T10:06:23.204053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chivo:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.170Z","timestamp":1788861948170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Chivo:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 10:05:48 GMT\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2424,"size_decoded":1162,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1cd50dbd2860496c3c8144f335909a9a","sha1":"d6c907eb30c64f01c0f2f1d53fb3307f2755009a","sha256":"108d5a101f8bfccf9a384997475d8f9acee16868c9a51abc1db49317f73c9a80","sha512":"40ee6906d244638339914df0e34c4bcaf8b00bb250f59ca4e1e231580ab78462c3fe279ee38ccdc302dfde85ade1ddac826345e6e9db7bd9c7c8b1aa6b9c2026","ssdeep":"","tlshash":"0741e455446a9d00eb472de273ce7d32ae8eb1907461c978bffd0889ddaac31231671d","first_seen":"2025-09-26T20:21:25.441372Z","last_seen":"2026-09-08T10:06:23.205382Z","times_seen":58,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":35,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/bonanza-billion-67fd2ae7bce79485804806.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.209Z","timestamp":1788861948209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/bonanza-billion-67fd2ae7bce79485804806.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:33:59 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d616949bed882f7828a9d7889ae6998b\"\r\nx-amz-request-id: tx00000cf485d3c72a44e18-006a9fdceb-2e41f6d3-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7zlyZUMDVm9XOg00Q0Elz228O68NZBgn9h%2FeqvtAXM469XAcJbHKFkg40s%2FF8a55lWAjU4rw5Tn3uIuMDhx3UZS8SNW4o41ZBd9BskxGllubgO8qWVuYEXpL3sz41uQlPnyTmXYXZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23084fdb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7320,"size_decoded":8283,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d616949bed882f7828a9d7889ae6998b","sha1":"95934544bc57211f032c9b007587a4e12dd8be74","sha256":"ea5872ad5567f4015d7ed7eeca65dc3afb72b0db24dab99928c70aff0321a5b0","sha512":"fd351004fef19942735dacacd80fafae7c8213ecd7447e225a3e20c3409d80fb36d28faee3ceb7e476be1be119210647ced31e0e790a8307bdf45290374e6a7a","ssdeep":"96:fdpTyi6rqjCA9sG3+Pc3VpcZJ+RHqu9ZhlsOsJEoSpBhPbTcEgcuJjaJRXUrCv:b6dAC1PQe+9D9Z8OsJEoeB9TQU5Ei","tlshash":"ace19eda453e77702964888c5b812bcfd2ee684f0e5d2860a519bf4ce2a524d8e806dd","first_seen":"2025-11-10T15:09:50.406089Z","last_seen":"2026-09-08T10:06:23.206194Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/tome-of-madness-6855019d2a99b798700716.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.298Z","timestamp":1788861948298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/tome-of-madness-6855019d2a99b798700716.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:37:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"58b08f6397513c685ac4df7ca25f4c21\"\r\nx-amz-request-id: tx00000c9517ed46578c5ea-006a9fdceb-2e3a132b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6T75638Jf4iYUYEYmAQlWcfdp7xuDtH%2BuvxyMoDbsFR6zDX64s662JkbTTvmNigHmxPOAu5pG1X6VHnTbFQ3kAPNi7ZQbWezpY0l0ONnWslkBgjkhNP3Y8kKEZM70KHj63odKe0XGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d81b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28452,"size_decoded":29414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"58b08f6397513c685ac4df7ca25f4c21","sha1":"20a3599d316a2c374a32ea1b04ad3e4931d910e8","sha256":"c6c4ec90edd8a89de838075b9059bf3ec4fadfb5123ba222561d846651c04580","sha512":"e9e1e5ed5255eeec08fe663f7c56147aa227de3d764201c327f71378fbfab78bd57348e312752e82cc6764a0564379e55a678f687e32cf172379d0917c02a3a5","ssdeep":"768:sM6dL5ybXySf2We1PexFrTaqbdxqbWazYpQ5gh2rgcE1LP:s2y+CPkLb662YMghGyt","tlshash":"69d2f162c1f84c091e7b7dc7be643574027bb80465006b626978c8d79bfd3a22c63b96","first_seen":"2025-12-08T06:56:23.284721Z","last_seen":"2026-09-08T10:06:23.206725Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/power-up-roulette-68558d66856c4278881618_414x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.811Z","timestamp":1788861948811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/power-up-roulette-68558d66856c4278881618_414x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:34 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dc957cded53531b3e4e701dd475325e0\"\r\nx-amz-request-id: tx0000028250f0891685e6e-006a9fdceb-2e41f4df-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LV%2FawFXE8UubThT%2FUiAPUp0qPVdvDwUjck4U1BrHTIa8CyoyEApcKUA%2FdkiOAQmMVwSPO%2B5lKRA7kL2tXivc%2FutEkf%2FU4nOlW%2FZkzqAfM8QDxcvglNDm%2BIT0HaikLc4AAMe9rUQCZRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18a5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32320,"size_decoded":33296,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 414x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc957cded53531b3e4e701dd475325e0","sha1":"cfb89599a90ed2b3c4ebde89c1051be8f105d18f","sha256":"6b5573e90893c45bb15e2147d7d7e8af97299177391fa371ee00709b434a82f4","sha512":"f8a7ad6d53b8799939f08579ea53e9e41eef1888707fd908f52e36022b74e26795e5e775b212c3076e0ec53c61c3f3f0092c602e648438c072d1d2783071b60d","ssdeep":"384:VPy3JjkjuEzZOnuyApTpGBYkUgJSrAYIt0pwp1PI+uu75ZqgJf8OIYipSSL/Ynjq:V65QaEzZOu96B8pwp1QuDqq8GiAjI","tlshash":"e1e2f2ad76455fafd089e6d186028e0095cad141af5de0be7813b94b0df914f933a0fe","first_seen":"2025-12-08T06:56:23.16101Z","last_seen":"2026-09-08T10:06:23.209101Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/french-roulette-classic-68596a3022e5e321251459_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.820Z","timestamp":1788861948820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/french-roulette-classic-68596a3022e5e321251459_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:52 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b51dff65176a98addee772a4a54a7c72\"\r\nx-amz-request-id: tx000001fdc7ff48b37be27-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKNZeygPmNJBwro3DZtD0QW9cQlGCpOh%2BreSo8iUXlrrdo78lJoTRInT7SD4O%2BVVbALpiDQR3RVQY2JcghWeZDYfCRjFRzmWF0cgJXPsdpD0amLchAotfYA7PEFaXojfLf1OUQ6yNMo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c28ad712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20528,"size_decoded":21492,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b51dff65176a98addee772a4a54a7c72","sha1":"647b60f6be153f9136658c401a3fe226f38fc2bf","sha256":"095b60efa74a25b37316d039cd0487bb0a6fb2d4f90c49df1883ed464c2aa899","sha512":"7eed6510870c0af41c1e9fd3319efd100d72aad5b12375ba247845b5ae162e609083f6ba99daef0283271bc7f616c5c1a68c9b7fe6d45933e09ef9c198a5c35c","ssdeep":"384:MK+NoPMxKBDJxMhDAVfqhVNFM95deCxONfqHx8u0YSnG7iWCH43LH2Wi8:MrgMIB8m2a95dL8EGiSnG7iWCQ7f","tlshash":"d192d1f42008178a969842004ff4193286cd6a7bd5fd27824fb0bfd81f6b5a1f1c6d63","first_seen":"2026-07-15T07:58:47.844705Z","last_seen":"2026-09-08T10:06:23.209977Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-pragmaticplay-theme-dark-67d95cf7d7fad243826986.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.198Z","timestamp":1788861948198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-pragmaticplay-theme-dark-67d95cf7d7fad243826986.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"836e731b5d2d8ffddac8d5a63b53cd4a\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:22 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000002159e102221fb615-006a9fdceb-2e36314c-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncTEritrBDZzM081BLj%2BjYNaogIc6iJr%2B8vzlgxf1GEt8HYoEgyPJKHOGsa%2F6WHvFu56wRbgKKTfKFbxl2w3GH7BZ9VeJABz%2FhUGY%2BX%2BM1LMbP1ZdZ5Pwxaez57VJgI%2BrNJcz1snWdI%3D\"}]}\r\ncf-ray: a37d23083fd5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5424,"size_decoded":2938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"836e731b5d2d8ffddac8d5a63b53cd4a","sha1":"d067255203433492b98ada3eb2318e4d79c30775","sha256":"d87200d05d8eb68091f2c18a0a353bea5e49aea9af3a300bc0c55e324ecce06f","sha512":"013a5063e5a75231ac43f1a2701323a7e40f11aadfa13b10a5a020ed1241168ff21d9f994594ab160fcd307c1a1f32b442ce2461f36265a9c5e5bbfb92aeaa25","ssdeep":"96:5zRqQc9eAqWNzJ3IF1LbvCskJA4kvpK4Y0evuPSns9YMeR+amTdEVJevjoF2gPWb:bzc9gFwNiKK2s94+dEVJevjoF2gPWC0","tlshash":"c6b1f091afe8e0f4da84e788d517dc66be03a9fe7b66dc41c3c11604a4528d86cd8ed1","first_seen":"2025-11-10T15:09:50.412334Z","last_seen":"2026-09-08T10:06:23.210503Z","times_seen":12,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/caribbean-stud-poker-686b72e24e0f2159351008.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.222Z","timestamp":1788861948222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/caribbean-stud-poker-686b72e24e0f2159351008.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 07 Jul 2025 07:10:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"82718cf7954d1c5dbe1e1a673b9e48bd\"\r\nx-amz-request-id: tx000003fffd214e8743e03-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W784guWcq11agF5GHzoK%2BKFtQKhJ48d4KHAE5tCI4u0DnslD3iC6vj0gLPX54UB5MxVQtS6hvfP%2BuvAe3B%2FMWnq5dEQmPT6Si2%2FmHhAmLA%2BnDJFyRuoBHC7rg2pPwY8Xhj2B%2BAVwGbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8524,"size_decoded":9495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82718cf7954d1c5dbe1e1a673b9e48bd","sha1":"8abfe9d4ee68a4ad4616d279088371b6877662eb","sha256":"44a580cbbfe829b0f2d1c217ad41b34de9efcca758be7b9acefc8e7e78f4318b","sha512":"f069e5989bd9ffd57d4635b85030879fbff6a251181066c02ce59e86d91f5814fd2bc57661a7fad8c9f2eb74cdb779284fbc0dd8e73ca8551602ce39bcf23193","ssdeep":"192:7z6lgSlF4hYYBzpye/8R98zhDwmi6zGVRt:72+dOeEjShHi6zGVRt","tlshash":"0b02be6c831d54bdda49efb0f9b297021f56c4c28e4bc2b2478607f02c981de767a887","first_seen":"2025-11-10T15:09:50.350793Z","last_seen":"2026-09-08T10:06:23.211034Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/eye-of-horus-the-golden-tablet-megaways-68591736846f8625815076-685d5d1f59d6f055218742.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.214Z","timestamp":1788861948214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/eye-of-horus-the-golden-tablet-megaways-68591736846f8625815076-685d5d1f59d6f055218742.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:45:51 GMT\r\nx-rgw-object-type: Normal\r\netag: \"64469e2f91ad8a658369abdbe764d698\"\r\nx-amz-request-id: tx0000037183f4755649cfa-006a9fdceb-2e37889b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBSa4pT7s0Nw0aruvgUVYx5Y7DantHjH5LAeDvSWVyxsdh1ctSVr8sq5St0fNVk4MQRmqf1N8xPkBrUY77tecOCHfH%2Bvt%2Bgb6JtCeRTqxXtcJxGVMLEOpFFOKewgiXMqFaoT%2BWsm%2F2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23085fdf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14136,"size_decoded":15104,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64469e2f91ad8a658369abdbe764d698","sha1":"c114d845ec7c33a764d32ac4a08278be61ba9666","sha256":"b2fc550c0bfa9108df5ef6ddd4b74a98168fc6aa4741fb7be7391bc25186e701","sha512":"6f9be2463447facfe5f5e5f108dadb1ae5e849e2b22b99ed910e8ed83c66b1290c0e896f642f2deee65e9ff34eff8023b07e885ce245002cad8b5a633da6573d","ssdeep":"192:K2bRj7CXgLuPY5VXjdP+ORkTA0odAo3ggFiFnfdzEv5N6W4Guv7OpFaTmuEvh6m7:fVCPaLRcAi7FnlzWV4G27bTmtyVED","tlshash":"8d52e1d9275d292ad688dd791581f0a21b352b8b698d014b88dfc7ffe9733f01990234","first_seen":"2025-12-08T06:56:23.263904Z","last_seen":"2026-09-08T10:06:23.212902Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/netent-67ecf193d10ee214705447-67ef86dadd30f634018579.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.280Z","timestamp":1788861948280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/netent-67ecf193d10ee214705447-67ef86dadd30f634018579.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"c036ca5ab10de650aab61843baf636cd\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:03 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx0000096a6bedddfe12c3e-006a9fdceb-2e38c8cd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heoRfKmCyYmtDrXIEVzd%2FFMsonM%2Bsv9Ae4fGFXbTs22ckqJEM5HI%2BwI7Sz0hGluHEAS6x57Uh%2Fb4zWi6Rrez2lgP48kzVcUyu7zdhnb1w5J4KljTXo2v227wfKCdMGx8AWCRJymBEwM%3D\"}]}\r\ncf-ray: a37d2308c80d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":1411,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c036ca5ab10de650aab61843baf636cd","sha1":"a06c5305971a7789efd7ae86c01e1542c1253ddd","sha256":"d85f87ee59588cc718540c9be46cf3f42d67dbfbbe703290dffb20d85264b51a","sha512":"0fa22a293de5863223cf54f88bdeebfc9471d1597685492784856cdc97706e9e7ed81ef2b159fccd8c022a54e1c7670abe86fea51785527400349d3302000851","ssdeep":"","tlshash":"f211ab36e40df4b85deb879c0433e4a545ba6563dab4a238c68a774dfaeb4c80d20881","first_seen":"2025-12-08T06:56:23.282309Z","last_seen":"2026-09-08T10:06:23.214196Z","times_seen":19,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-booming-games-theme-dark-67d9800358125564868225.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.319Z","timestamp":1788861948319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-booming-games-theme-dark-67d9800358125564868225.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"d284aabcd14e91ce95a32536312db696\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:42 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000a70dbb8fd0f55e85-006a9fdceb-2e3a1588-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyjhFgnSDUZtvTWZL31GlkeMivFGxjqCezSflRAR%2BBgm3jACK2VSyjV7Du7lqsAflR6sJkRIlnjU2yUV6x5KxrljGP4CrNfknQC95gPkivTfoikRs0z8niyj%2F%2F4gVkbQLdktyO2woCI%3D\"}]}\r\ncf-ray: a37d2308f82a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12347,"size_decoded":5762,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d284aabcd14e91ce95a32536312db696","sha1":"46893301af01bdefb6ae1d9beefa5e150e43edd2","sha256":"0f20534ba1ab3dd6533d4659367a3f624c7a5ab788d9fd85d8b2522a83576aca","sha512":"cec1b867ea4281b6341b93c0926338426ff4f97aa1af0b1522338ec5bcf616bca626cccdd364e7c1abd72a014c5b0eafedd93630e48cef3a63beaee8fb60dd9e","ssdeep":"192:CJ9a2kK5DpeKea7z1qLg9alin4DZOR9edjcpR5SkeL7EYKhzQmLK30:Cp5ea7z1MGKin4DZORYtkg/tWzB","tlshash":"784200efabf6b390f0227be56553f074b65b7c7d6733ce8650035aa5a98400ca86cc94","first_seen":"2026-07-15T07:58:47.805389Z","last_seen":"2026-09-08T10:06:23.21612Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fruit-party-2-6854fecd98b5e643186012.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.781Z","timestamp":1788861948781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fruit-party-2-6854fecd98b5e643186012.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:25:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e4652a0f85b923d8ccc60759cd3fe9a5\"\r\nx-amz-request-id: tx00000a8b34c6a03f10edf-006a9fdceb-2e362e40-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNYdL8wWQ6kghVuxwLr2mgJoAzLhPymoqW80lT8WBMKUOfJEihRZPSCaQeGRj1oL1IxMQYI6GlIRVgFOFQ2FPLWP7W7La0d8nlGGV1iXwhzLb8jMpfXB82JK761PiyRT5fIkwCfRbvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be892712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12508,"size_decoded":13468,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4652a0f85b923d8ccc60759cd3fe9a5","sha1":"e8dc3dcfab70ee763680a767edeabf518686fc54","sha256":"ca30a7a8f63e138b92f9aafd45e5281ef6a84ab3bd001d454bd062efdd75ac59","sha512":"d5b5b7b2e714fb5492e24ab5c226f82d5fd82058ce63c2624fdfea857cba7c5baa977f433ec75fd224bc9219b237ee5d7d19cec19d1a6bf65b1b6bcff6e61b6e","ssdeep":"192:5g8Nl+DVdBWIUOD3CQkyEkRjSghE/0hLhW8ErlcIpKowBwcGAcOZPR9If:5g8sVrWtACQkl4Osg8ErlcSKoVcwOpIf","tlshash":"7a42c091bb6ef94de710132ae9242237f4d8b0a565c5a3c9e742d0d24d23520f0eb2b7","first_seen":"2026-09-08T10:01:53.504318Z","last_seen":"2026-09-08T10:06:23.218056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/cricket-x-685907c211c66513097317-685d5206a53cb457022741.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.848Z","timestamp":1788861948848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/cricket-x-685907c211c66513097317-685d5206a53cb457022741.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 13:58:30 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8001b5106060bc5745cf2a4524657d95\"\r\nx-amz-request-id: tx00000cd0d9bfa3cc36715-006a9fdceb-2e41f6d3-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sR73rTZufu2rFPH9KpsCpa5tdE7cGhG%2BWU%2B%2Bz6g0j18tsvsXO8veMVllNyItABnfJPJPdTTuihXSFl1wlvHjsXll%2FbUKAdlOZLkXPEjdQ06jKxrUGoQC7uaQtTISdk8tKp7p9zcVToo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c48b7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10112,"size_decoded":11080,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8001b5106060bc5745cf2a4524657d95","sha1":"709932ffaa7828ec163358514726260c3b438b03","sha256":"20b01c9cea3d0929812276130c56656d21defd2449a918dfe3309fb6d45dc189","sha512":"2e22741f0801ab18bd60ede5455b41dfd2ffa9b840ffaf892727c2a02fc94206b6574cbe693ec05b2dfe95460d5ea45bf64bda0b03775f45d76d360a8a6b8850","ssdeep":"192:BMXkFi5EUhz+b7YlqL8+ePfR3xUoxaYZXCmNiu5J72yyh3s2y8O:W0FUJzO7YsL8D3BxUBoXCm4uz72yyh3y","tlshash":"ef22ae6783e1a339d7f6e8f03ebc2748293541f09b90061fa89f818390ba59c73a595d","first_seen":"2025-11-10T15:09:50.397329Z","last_seen":"2026-09-08T10:06:23.218858Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rainbet-logo-696e739d435b1865325084.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.173Z","timestamp":1788861948173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rainbet-logo-696e739d435b1865325084.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dec1b4c7ca73740959115e83f9b47959\"\r\nx-amz-request-id: tx00000472c434fb93e7314-006a9fdceb-2e36326e-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K38cNl0bOjINw2I1ivu92ZAdyP27BE2P9DAbvaX99usfhkTrH9BvMUVUvLpy1VzkUmp4ZoCyXp7lY3z%2Bhk4gohjbK79fU98N8Sd3Ypv9CMixvUKts%2B77Gox%2FLcx2JPmxGy%2B4DIHr9pU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23081fc1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38958,"size_decoded":39926,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dec1b4c7ca73740959115e83f9b47959","sha1":"4341aa3551dae0cbf058b948c6f5068f6a78e077","sha256":"3fde90e9988b5f338a022f10cc57ac3ab2db4afc8bb824aa7c62f9d2d0107652","sha512":"fba607a83a1ea883137363f3152e1a8dd5bae099c059c0152987b73520a5a0ebae5132dbe2f116d65dd1a638a6168bdb88f68ede20f5d8784f57e3972721616c","ssdeep":"768:c7i35HwCuaA9nSjS7HunxeDBesIdUMZZAIgSND1WVggJyK:c7K2k0SQO6BeF+MZZ68z","tlshash":"b6039d5f2ad09c34c81d3136a6df6b10f6ce67182ae00ae5df710525867e8aadf2dd0d","first_seen":"2026-07-15T07:58:47.76739Z","last_seen":"2026-09-08T10:06:23.219484Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-microgaming-theme-dark-67db1f413893f554212269.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.276Z","timestamp":1788861948276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-microgaming-theme-dark-67db1f413893f554212269.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"f9465337b76764c070b92a59b557ff92\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:10 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000b44a4ffe246cdf8a-006a9fdceb-2e41f584-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEJLlGL%2BSlBdLSbbazRBBl4M9C0OIc56wSw36icDt2Lao1xRwpPXGcTIDOz59bn9DQwz8YmIOGlYL3IUxAMGTr%2BQ%2F4NMOqUxoUvtMm3bH6c%2FWhQWCBvZJjMqEHRpLjnxkHFrWPtRZJE%3D\"}]}\r\ncf-ray: a37d2308b80b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6947,"size_decoded":3558,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9465337b76764c070b92a59b557ff92","sha1":"8f33720ff62c4eee40edc6954355f5dac94f3f17","sha256":"2d26126e70f2e5567d21e654feacea02c896ff24a78b2d6dae09576e9306995f","sha512":"77f80aa1b57a1d17ac8a414b456ae77c90d6758ebdd3210e830901820815486ca9c8c4e10e5608ce1111acf23cfec1a14c1465507a9e5fa86f23b5853a642f37","ssdeep":"192:jzd0ceErysPHqlXbm0tvnogWUSF/Z2yglPEsh6:t7vygHqlrmwogWdBZ2dY","tlshash":"d2e10faadff8a6f0d9812785a453e472a58370ae7b33de00c5812ed4d2814dcad5bcc5","first_seen":"2025-11-10T15:09:50.395489Z","last_seen":"2026-09-08T10:06:23.220253Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/piggy-riches-2-megaways-68591859ac924829938322-685d5e854451c639704334.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.310Z","timestamp":1788861948310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/piggy-riches-2-megaways-68591859ac924829938322-685d5e854451c639704334.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:51:49 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a636c78109b33623570f993c559c0e2d\"\r\nx-amz-request-id: tx00000919b8de630961761-006a9fdceb-2e378670-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7p42RoiOvZ%2BBUT2ZPYPoMpYWFE9k6WV4UUJiXa1SZ53MziimJBgpbglbSHf3FXXeyhwT5CcJFswI0rP4Ac%2Fsuo5p9RJZRxcPM0tf8iV0pTiGYpZc%2BjO3pCXE6xudnHWbOOm%2BCNHochs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308f823712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14268,"size_decoded":15236,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a636c78109b33623570f993c559c0e2d","sha1":"4bdfb5100eb78ddfc96724036ba693c4e3d7c731","sha256":"8dfb35867adbda67e43970744dae86bf076f289d85aa03a59d6a15b0dab50b04","sha512":"98f77cb3ddb4532e9ae7348755e28fd99f29e3f5d362a18c3a1011bd4d5bdec2d788b472e0a39a9ddfbb6ddcf72794c74cf85b167703fd6a2c6197f7c708f74f","ssdeep":"192:56fKfBdqrB8WOnv7RNIJf2FmWmiBqZSPG6e+2MEtzPtQkIvGIKyCjY4k:EfKbCyWczGf2UziQsu6eDMEZPOkdTNk","tlshash":"5252cf83b66dc453e371473a4cede2e13a75e4949586822c5d1f27e21cd3f494ec88b2","first_seen":"2025-11-10T15:09:50.383403Z","last_seen":"2026-09-08T10:06:23.220789Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chivo/v21/va9I4kzIxd1KFrBoQeM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.471Z","timestamp":1788861948471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/chivo/v21/va9I4kzIxd1KFrBoQeM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino-au.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 12:34:07 GMT\r\nexpires: Mon, 06 Sep 2027 12:34:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163901\r\nlast-modified: Tue, 09 Sep 2025 18:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33220,"size_decoded":34033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33220, version 1.0","md5":"1db23ac1c6fae6d7576d69640d427551","sha1":"bc37bcdaddd28f4a7aa03d3a93686f4a5f410d05","sha256":"499c79a165e69a65cd2e1823c1a1ae822d7d5a09d2b10b5a8b831fdb15f2ff45","sha512":"fc2e68110a460a4d9c8eb78e62987705182d0c7764ac53e04fed0d51c1a63ed69a07674099382ac726f10ea957dfc538692d8671af216b5fe92bc84173c7a742","ssdeep":"768:Xdw1mCHPf2QrZ+CS6HObTqEOX5TILvZMBJ5OAB9tj1ckMANwSXw11:X5+fXrZ+CS8GuXuLvZ6J5O2F1cUOS4","tlshash":"00e2f1e1fcce8bcab45cb39e08b555df88745e9f24e54b2248cb6e2300c6054afea531","first_seen":"2025-09-12T04:45:25.20632Z","last_seen":"2026-09-08T13:15:20.347203Z","times_seen":3754,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/big-bass-splash-67fd2866e23e8501641659.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.196Z","timestamp":1788861948196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/big-bass-splash-67fd2866e23e8501641659.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"2cf72347dff6c0bd444433ea662a87e2\"\r\npriority: u=5,i\r\nlast-modified: Mon, 14 Apr 2025 15:23:19 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx0000006de38563310938d-006a9fdceb-2e378670-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyIFAWNQcN3KUCdidiFLfCZXPFdfCidDYz8b62jaK%2FEkkPg8EcXQEef9Lu6%2FZPueAWgeRR4A%2F3oUXrIYj5CndPmw5UBgkSLMCW9l84RB0pLUHoYJGIJ3G2bmqXUvFmN62GYn6ckaNoQ%3D\"}]}\r\ncf-ray: a37d23083fd4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202375,"size_decoded":152290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cf72347dff6c0bd444433ea662a87e2","sha1":"418db32cb618d3df11394fc91826bbe8cee6de1a","sha256":"7ce4cbdf8b43d1f1ffa19369427b58a984c93a88afbee7ea0ef7a21aba000a0e","sha512":"57b5293baf54b78ab0fd3912d0cad7001e88812c9317df7430104fe3d62f3a7ff7cf9ea7836bc177304b3272ea2b2c22892bf7af5efdf9cbce8fe40aa85fd7fb","ssdeep":"6144:zog+mnhqWu0U1WZicVi1S/Mybo31qv+J9nSz:zz+4hBW1WZiJ1TxUZz","tlshash":"0d1412741c814e2e07e616a473dbde5b5faa599fb680585de2c43cc3849899f0fba0cc","first_seen":"2024-05-03T22:08:28Z","last_seen":"2026-09-08T10:06:23.222143Z","times_seen":123,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fortune-gems-jili-686d28e660e4d550191492.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.786Z","timestamp":1788861948786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fortune-gems-jili-686d28e660e4d550191492.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 08 Jul 2025 14:19:18 GMT\r\nx-rgw-object-type: Normal\r\netag: \"07d21558e64df05544845422bb0b483d\"\r\nx-amz-request-id: tx0000073b8fa6d1b9fe973-006a9fdceb-2e41f255-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcsSwLMOrcEufMh6R12stEwtzs0283btGoE9Ty5K3FaxrfZ79FQTLU3LO0RSnx4uMzTIjBs2vsswVelSDfwnfJdTWaXj%2B6IdzYLNoBI97oJ20%2BgvhjCmrxMSuIIxnP5HaJzpr78Kk3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be895712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11508,"size_decoded":12472,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07d21558e64df05544845422bb0b483d","sha1":"55fa6759f99fd2e59967dee197526b02228f1bd2","sha256":"8662fb7cb9f06c0c64b63617f08224e5ad8e5d2471215ee8fd42f8318d46cc47","sha512":"2d2bd9fbff1ef1362a9333370b4bd69a6cc1d2eec2ee6b0776d4fee6be0c9520da473377cec11cd594ee514e3f1a3ba6adaeaeba3347253e5d19a74dab94d136","ssdeep":"192:gXA2S/O3OOqemJzM1TswzcAYtsOghdCt4DJU+Yo4XrYr0DQ/I4n:gQ2S0/qemBSYwoJbt7rLf4n","tlshash":"3a32c0c7a71a080dcda661729143b1c353406d8f2f34ba42ab3a4e6233ad7c9b654157","first_seen":"2026-09-08T10:01:53.422215Z","last_seen":"2026-09-08T10:06:23.222661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/floating-dragon-megaways-6859407a4938f024897211-685d4e56e70fe874054295.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.816Z","timestamp":1788861948816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/floating-dragon-megaways-6859407a4938f024897211-685d4e56e70fe874054295.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 13:42:46 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3fdbdab1800db1c467291bb3cf9200c0\"\r\nx-amz-request-id: tx00000d25cb5f53feca1bb-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jiDMlhQYZizf13P9oFRDqGDZZtOCW5B57YO%2B%2BIBwKEWIfDEpnfyfJX1u%2FvaS0m4lSyZla5hT3%2BRAgM56MIwRbM0jVnw%2BI%2BIZk1GZq5joRdBY49cI00uCulRu99Rb7LZTR7VLjL%2Fty28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18a8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15536,"size_decoded":16510,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fdbdab1800db1c467291bb3cf9200c0","sha1":"37c13b92f3de1c8a22ab6c7c4217068aa1eb6df9","sha256":"cc052645ca7b393adcead95acc4f0bebc9d393a4e4f5c25faa622aa9b4c3a513","sha512":"e0892a647cb357e87feaf82017ad6842e53b098fc29323af4c70555175392094ad5ef052b7b6e612ef06fdded0d1a946e6e513e4ffbb006a86184e63b89e23ac","ssdeep":"384:BZEXuPoDIaSfc2Pc0tj8Z51cPfZ+dftZyeryrLrA0K6BR:BuXuPCPitEcPfaWRcyBR","tlshash":"8e62b0d2259cd223c677d93a0083f545867def116727c4a712697822caf31ac3abbbc5","first_seen":"2026-08-08T23:54:59.038377Z","last_seen":"2026-09-08T10:06:23.223267Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/christmas-crash-68591097cd11e403471499-685d54eeacb1d716948039.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.228Z","timestamp":1788861948228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/christmas-crash-68591097cd11e403471499-685d54eeacb1d716948039.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:10:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c24528fe6adecc445e6e2fd0c599b9eb\"\r\nx-amz-request-id: tx00000e626d39265809c69-006a9fdceb-2e37d753-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6ympu917tw0G5qDTgldiv7BG9sWJEhfHHEMujyf28ZWk7ogPR7vVmv62dTOFml%2BG%2BTnyibrCTrsWG3OMTO0KsgLPiNRmHjNE3Vqj0qR2Yi7buPqrCYeI8J3S35nekH2f3Q5vUJMFHc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23087fee712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12622\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12622,"size_decoded":13586,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c24528fe6adecc445e6e2fd0c599b9eb","sha1":"2a036f9649d5f2f0a38fafdb9793390eccdaa78f","sha256":"4a2d45e497d47e4bfdf6e1a1462324c9bce7bbf466cf0e2c17db9f2851292612","sha512":"097c9d77a51d9b3bd888da11e08975dd5685ad1a724fb6ccecbe6f136e1397695a91fe5fdcfcf5d435a436774bde671b3b35fed915b1eb6f5319be9fbf7feb81","ssdeep":"192:XG4zUfRX+ALSwfyh0AL0ZeKCmdLC2vb7MexDz3gczlxeN3fTXSQOe1sM/YC5HO:8RXJfyhoZEO2wgeVz3ga36PTjOepu","tlshash":"b542b0eb1f23781dd0c97e7e16e74f549a2ace851592136e3dc9993705ecbaa5b20004","first_seen":"2025-11-10T15:09:50.413997Z","last_seen":"2026-09-08T10:06:23.224Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/mega-ball-100x-68558ccebacf4483614035.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.796Z","timestamp":1788861948796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/mega-ball-100x-68558ccebacf4483614035.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 16:31:10 GMT\r\nx-rgw-object-type: Normal\r\netag: \"50cd5cad1d39cc5469e9e3d872e6ea60\"\r\nx-amz-request-id: tx00000c76332ece5bf5c84-006a9fdceb-2e3698ac-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BO48WbnY1X5KR1efAwqx0dXZSQYYHpdSbyPLnnRTAZl9wZnKcdnas7m%2FPKZyLgALCVCbTc9c0LTdXv%2FCKBs7Qnk9rWf1r%2Fpn8%2BQecUV5lwPb4RB0bS1Lgs%2F7kZshDtjbUTeG6jTD3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf89c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20024,"size_decoded":20996,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 218x218, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50cd5cad1d39cc5469e9e3d872e6ea60","sha1":"0a8925ec79bc5c7fdc677ad850cc4467075ff15a","sha256":"cb8fe36b8dcb3e9f65b43d942d06e6476761179f79e0bde26c560a8058c4210f","sha512":"53b3fecb4b81479e50eace7d9b14eff0aa6b55271beadff6f5f617efa5d3ee4b12a3b0d412623b729a17626cd5232ac6fb806d9531ed42f878afd53a04e7c01c","ssdeep":"384:mQjg7bMwAcIs/XaOAlt/+kD6wSIjNuJ7OLCLSOc2oSNMB+mtLmMw9/:pjgyUbAzD6wSOUJ7Occ2oSesZ","tlshash":"a392d0e7e86fe8b2c5244672e6740093ac6a3fc79b6f5c66174578d137d8f80c6806ca","first_seen":"2026-08-08T23:54:59.099171Z","last_seen":"2026-09-08T10:06:23.224513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/european-roulette-685969c805ec9708789419_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.815Z","timestamp":1788861948815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/european-roulette-685969c805ec9708789419_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"668ca12b45dedbe4733b9f5ed3684f1c\"\r\nx-amz-request-id: tx000002e484fa961ab7644-006a9fdceb-2e363020-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n07MouYf1mujZHjlChK%2BOiuwQ8qzZubMKnP27EYz9j43FpK0z7da6KOXmx1lbSH4%2FHUdiKDjQQbwWDFCWvVENP6iSJsp8IoNWhZPmzsGQ%2B9%2BKFKuJmD6asUD5YiF549t6nQYleIx%2FkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18a9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28672,"size_decoded":29642,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"668ca12b45dedbe4733b9f5ed3684f1c","sha1":"b3bb11d6fdb2d2def30add452eb0c9c92501653d","sha256":"38764fa47db8eb4633fb71f531855b90ac372827e84dc1f000c119a22af2182c","sha512":"8273afc5732e5456dfb73b380d897af83e0d5632aa269365045a2125c80148b3c1f71aeaf97670d36696da4f0be3057612fbf73123dc33966d41570b4aa8d8e7","ssdeep":"768:+9xbdi4uEqjKVDEkPL0evqLSd4KfmH/+PmT:+Ddt7qjWDuAqLG5fmH/amT","tlshash":"10d2015fdf84e051126ce070b8ea5eb17ace6c7271da22d34f60652cd5a64274c2dafc","first_seen":"2026-07-15T07:58:47.83066Z","last_seen":"2026-09-08T10:06:23.225Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/double-roll-6859086da41df925807219_312x226.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.855Z","timestamp":1788861948855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/double-roll-6859086da41df925807219_312x226.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:59 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3007e8b12fecd4a908136c4ffd7154ab\"\r\nx-amz-request-id: tx0000020f6440f8c044016-006a9fdceb-2e362ebd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZAyMMmORWJzUVD2QnfOOLqlZUWtQFrzfHqf1juw5qSzIdZD3KeapO%2BF0H4ZHHfl%2FYRSggomT3OOK2nYeazZLg8Cxp8xlxiZ%2FwVT8tXblMlf%2F6tDtAxx2hHg5AuyECl%2Byyh%2BpAhOSj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58bc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12840,"size_decoded":13812,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x226, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3007e8b12fecd4a908136c4ffd7154ab","sha1":"510dda2e4cf24cdf323013960d534d70adcf1fd8","sha256":"1b9aed62218011437a00aa0548e697333562dc7eb92c5a49b66e68ee90bd4ea1","sha512":"24fe702fd5b3f5766c61497ad17f34c073380cf4352714d4b9a0d333c4b82e42c7f7a68bec63af9a95e901ae0b83cf6045a5ef76fb7697dcab2a2006524463c8","ssdeep":"384:RKrxTm7vcjij1ZlNJvnUZ5fpO3LiABlg7mn:qCUjUhvn8ds3WABmG","tlshash":"2242cfafbc7897d6a20ed8b256b029d47b4818c8c74934ef7e451f0bdc725158d0d29c","first_seen":"2026-07-15T07:58:47.79998Z","last_seen":"2026-09-08T10:06:23.225735Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/sweet-bonanza-67fd2dae6eb43050195396.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.202Z","timestamp":1788861948202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/sweet-bonanza-67fd2dae6eb43050195396.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:45:50 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7d8891cb245b16b0248edeafd1c1c416\"\r\nx-amz-request-id: tx000003edddc23b3c8d230-006a9fdceb-2e3698ac-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTFs1%2BkJiK9brbvFpVJofmmj2NO1fbZIyrHH2vSZ%2FHswsQLGRf5moaixGYSvg7qG4oXiH%2BIyAWMBTp6QXtG%2FR2wKQZXb8062WNtviHOERsBR8o39iUEokENVpyDaixV%2BWEpn%2BUE%2FtRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23084fd8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11250,"size_decoded":12224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d8891cb245b16b0248edeafd1c1c416","sha1":"a874390bbe97b63a52df07e81cc0ed6f68d902d1","sha256":"02343e976d3ac45209ca6ec5e15fc4d0986a1ce2dfab5b02217ef304b9d0354c","sha512":"e0c5580d6ed7532032a03501bd367b30c1cf2f0be8e5c16ff0f324941f630ffedac5d99e6b608820dcd312f15db6dbb5c67a5de10de9877942ab4cccbdd0629a","ssdeep":"192:60YxSgv19ksS8a8FpjbpvZBEvl8V9CVVb1grC8sulvjeCGLU7eqxwhY6rsy0s:rhgv1isSX8LbX866VVaPSLV+6r/1","tlshash":"f432c08d3894011508faf7c159d26afcbc5d192ef47109ac245fd96aa23a0953c8fd3e","first_seen":"2026-07-15T07:58:47.803012Z","last_seen":"2026-09-08T10:06:23.226513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/bar-x-safe-cracker-megaways-68593f430b220206616018-685d5ef1df130467179385.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.215Z","timestamp":1788861948215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/bar-x-safe-cracker-megaways-68593f430b220206616018-685d5ef1df130467179385.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:53:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"afec8ec9b4f7cc44062dcb4ea0a4aec9\"\r\nx-amz-request-id: tx000008f99c62e32df3222-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j75SGayUsbun5m08PvmVbvl6ZVfS3esDt1iSC2DBDMhQbGUrgoyvDnUQfvc8mJT6FM1bQQzdv6HllX5LUceub2X9D%2BjJbI9powxt84XIk%2F88%2FHxZTn1h1Zwax4cGUOWfl75HBkVZK04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23085fe1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7796,"size_decoded":8761,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afec8ec9b4f7cc44062dcb4ea0a4aec9","sha1":"b9decab2aa6f63df639b59d2a82968d96c3cc192","sha256":"945d39c1af95645711ad9e8165af4e30a60d64c1ed7d9bf1ec59fc03c0f84c64","sha512":"6345144b3c0e8cbc0f74133b1b6ddf27d04e61fa652e609328e7b1f2cc89bfb99ccdbe23d3282ba68e317584d6615bccd880feeeeafb94f079f2acbf6dd7cd00","ssdeep":"192:E6qZ4haaSzT1PZg1tOrEa0ZNi/0gZT34nLIb+K:E6qedSzT1G1S0bi/0E4nLDK","tlshash":"11f1bf73ae820b0cc231d4b2f8e36189b81fca444a2f9b8f15d7a1567b60580fdd811b","first_seen":"2026-07-15T07:58:47.7686Z","last_seen":"2026-09-08T10:06:23.22727Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.572Z","timestamp":1788861948572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 10 Sep 2026 10:05:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rq6j%2FAhN727L9EyZHkaBYxvEDQ9UXhUfpKa8zjGEnMMirSrpnVnH3zsvUEjlXMypLf4jpEjToZauPr4KXbP4%2FVVAOalRSd4npF3%2FyZromccLEmARewsWKXkPiNb1%2F665nnX6i5iohbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\nserver: cloudflare\r\ncf-ray: a37d230a9880712a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T19:31:44.460668Z","times_seen":432054,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T10:05:47.367Z","timestamp":1788861947367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430; Expires=Thu, 10-Sep-26 10:05:47 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\ncache-control: no-cache, private\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMKIaAQAXGsMyXF76tDnqYAL%2BZyNeMtbXRgtG3%2BpCROZMp4zIQYz4%2BSSamz1Mz9IL5eDba9gIMk2kLx5L0dwANh11kqJtxPKc08D5VqA0PrQDJ7Ik6FrRrYX4RXPOfmrf9IABQy3nIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2303afa6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"http-cookie","value":"1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430","quoted":false,"path":"/","raw_expires":"Thu, 10-Sep-26 10:05:47 GMT","max_age":172800,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430; Expires=Thu, 10-Sep-26 10:05:47 GMT; Max-Age=172800; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":553799,"size_decoded":83687,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63385)","md5":"49644f5df70d30b42a5de68ed4af8b75","sha1":"6da23b9b62c4b86f78379914fc01e73851c9c768","sha256":"be80d6a170460431e1fa2b41d611c649f48ee2bae865ebdc90c9cfd3bfb562d2","sha512":"b8b5838ea9a74b379205b7b85b061f0badf6ff335c112897a5192275a66c5f0e5d67b4a7fc2903c74a059a7fe53b1a1f08db5128f26c21ec635747cae3dd1cca","ssdeep":"3072:HzmudYY2TT1Lefj0MQjJX7Fpd4S7Fc5ruf0UA0jXpy5LDBZWe4y7iQFmtStitpt5:aLebQMR94y7pFKWmfIN0EXg9","tlshash":"efc43cf65344d27e1403c3e3fa145915f2dab0add90369c6dfecc3589b82ea26e6468c","first_seen":"2026-09-08T10:06:23.228465Z","last_seen":"2026-09-08T10:06:23.228465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":63,"connect":25,"send":0,"wait":306,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/dynamite-riches-megaways-68591714b8a61172044663-685d5d142f57a438376463.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.309Z","timestamp":1788861948309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/dynamite-riches-megaways-68591714b8a61172044663-685d5d142f57a438376463.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:45:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"846e88788563882423daa8ec0d7ce3c2\"\r\nx-amz-request-id: tx000001bbe89d9859e837a-006a9fdceb-2e369965-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=skDJlrJMfDkYlurVvGRmjEiAHvWvPbEAViP65QE81CcbEl8%2FsHENJZk%2BYN%2BI0q1NbwKu7LFqRz9Kx7rAAh%2Faxk18ROWvP%2BBxU3wjzfJEBEI%2FvrNb8Mc0OIclqbzitUGZjg%2BLgpe6r0g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308e822712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12196,"size_decoded":13170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"846e88788563882423daa8ec0d7ce3c2","sha1":"57727c3ea73b29b2c4c8a11c13705091a541fe02","sha256":"a937bf63965f6c96a78e4f37c32f45bc4deb8ae2c546649b4658fb97a4d8c17c","sha512":"00f6f8481c75be132b24d8f3198bf00f666f6acd6be434dc13167c60dfee55263507e50b8d0673d13045cf1ab3219d61cd718702451996dfcf5731090e46d3ba","ssdeep":"192:f7lsCM71pr17SQSLSeoxRlKntNw0iTgHYv89lqXgr/fObQghkReVGoxH0J7X2bQA:f7lsl6L3orQzw0ifv8mQzfhN8GoHQ7Xu","tlshash":"1142beff3b2213fed8458779643a9a12332cb84dfb75a3661264de4451a41d12f21d8c","first_seen":"2025-12-08T06:56:23.146044Z","last_seen":"2026-09-08T10:06:23.22948Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/5-wishes-68551ac9c607c277396054_416x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.762Z","timestamp":1788861948762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/5-wishes-68551ac9c607c277396054_416x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:36:34 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a7114832f0a8e9554b28ccc114bc7421\"\r\nx-amz-request-id: tx0000066704e15946d4408-006a9fdceb-2e3a17cc-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPjUSMNUXC%2FIRDwKNyT2i01fPYM1aggzx%2F2O178tAW87eNH1TpF%2BzP5x7edl77b3%2BAC%2Fg3AdhVxE1MNPRI5cSLf5g8lCt%2FCR8Wsg7BCPAOkK8w8lOQIIlBA2FAOyiHSl%2BVkhfd%2BE%2BCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bc88e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47908,"size_decoded":48886,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 416x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7114832f0a8e9554b28ccc114bc7421","sha1":"e713ee30455a8d15662f6cd752a4dd54d216f01b","sha256":"59a0afa4452b555dd909335b643ac7faae5c8e9bbe8511e4e012f6bfe10ec9d2","sha512":"a54ea532639e4c5d9a014406e447238f778315d6b952c4771acf17ee52f7ee0961ccc78b967d93e61d2fa92585b0fc2bf19fad96ac50fed44d8719e461fc5740","ssdeep":"768:sCMnBy9AQ6+zIIs9Ib7/xY4f2xeO8pM4RWag6Sf5hsw3c0YvD7WOEZ/xzOyOXVWD:shy9AQ6+zAIHm5k1G4gaKssc0kHeOyOK","tlshash":"9a23f150ce3abf67800b6a14244faea314d07e7cc965a5e3c5ba88c927c551fba5a13c","first_seen":"2026-04-29T02:33:08.405163Z","last_seen":"2026-09-08T10:06:23.230416Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/lightning-baccarat-686b737e767eb932033182_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.807Z","timestamp":1788861948807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/lightning-baccarat-686b737e767eb932033182_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"39521c28d43f3e1acffccb9331c216bc\"\r\nx-amz-request-id: tx00000ce844cee659facc3-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kefqZNNP431JjcFM6p5fCF8mQvyTw44DggXvxzONbGlF2sgaVEf%2BmSGecc2sQzdY1NKvBYOV%2F%2BqeJeVzl4ZEooiDyKtlR8cccgtAPJLSiQnnyMCuObAB4YW1DmHKGMmVkB4LU1a2meQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c08a3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20260,"size_decoded":21226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"39521c28d43f3e1acffccb9331c216bc","sha1":"8fb9a7ae7a5acab96f83eb10ee084e3d6fa7da31","sha256":"1155a940ae752aac9c00cc00a21b8eef5bcd123fb67fe2817a67b4a495012447","sha512":"0258dc561037093928a0ac05df790438121d1851102c8e49083334f57f83da744775623f9c089599ba4b2634f58266ee349dafc378ea11d942819f3948a29763","ssdeep":"384:svEKDAXt59hY9/lzn3N5PswPQGlz+jR+vQUYKzjx+NIMWCaIVd6UoJnoZ/dIG6vS:svEtXrY9BNDPQ6aANhPx+NI3kd6Uaorj","tlshash":"3492d14010c5e46f45785b14c9cc43abbccd4d66e30f1bdce7062be64db7916b9a9722","first_seen":"2026-07-15T07:58:47.757875Z","last_seen":"2026-09-08T10:06:23.230992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/side-bet-city-68558db535a5a412961403.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.808Z","timestamp":1788861948808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/side-bet-city-68558db535a5a412961403.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 16:35:01 GMT\r\nx-rgw-object-type: Normal\r\netag: \"41bc5468767a4c495ae6a2c810a0d664\"\r\nx-amz-request-id: tx00000b7a1ba2ad7069afa-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJ1ufLJ1QQBtDWXZBNUKyEDxIY23mJ4t2VHiCNlIIsVymIZSWGGnKtUFl7%2Bse%2FCg5Opavtc5c4gwHfUZf8EgGZt7byqxAoVOyh2bJxvH8mYi7iDmBai0RP7iIVOPlrp1si2mTORR0vk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c08a2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14470,"size_decoded":15434,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41bc5468767a4c495ae6a2c810a0d664","sha1":"01c4aca8459aa2ecc286690a8153d42e6e6eec60","sha256":"5f3a0a4c094fa3302fc2fe372b27e038414a89569312a74660381d6ab0fc660d","sha512":"724d9da39e68a47f636fa78658fe089808582971449f2a5c729acea5a3336cd88487b491b30ea5b0b7f98920a64b89997be6f8f800e140654c511fa415e13c08","ssdeep":"384:u36EdCinDeAlH0Mw4T8nSW2HOMmtbFjPemSKorMS8:uKEcinD9zOlpUmSKLS8","tlshash":"4052c0d58b7846d40e781973f6b69d9892e703008e11a31c66c7fff4ab3a2c949db321","first_seen":"2026-09-08T10:01:53.48156Z","last_seen":"2026-09-08T10:06:23.231757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/majestic-fury-megaways-685941147f1ae248040056-685d5fcd2bcab192780391.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.216Z","timestamp":1788861948216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/majestic-fury-megaways-685941147f1ae248040056-685d5fcd2bcab192780391.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:57:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8ea271b1c93b410f90bbee6c440ed506\"\r\nx-amz-request-id: tx00000857828af918fe5ad-006a9fdceb-2e3a132b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjs%2BO%2BNfExGX5TMpuguCrZidrRWWI1py5dUSwO0x3j2xUKyKOERKtDiKziLrGeP6e9M4zfJkOnnVB1XbjKkueHgmGyKSThZHa9NuntGJHZT1Rz4cVXMHQUzryuaZwESoGC77Yyl4EfA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8718,"size_decoded":9681,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ea271b1c93b410f90bbee6c440ed506","sha1":"f2517ece314bcb12a1061ad3b3762ffdc83d9824","sha256":"398ff3feb4121d42462fef64d0666ad7a0ebb166344a46b622f7a62ee0d07fcf","sha512":"819bf8e165e0f68f210c64d414e1b115fe6da41eb90f00a3a7a7c49fea639527f87339ba6f05256f3da3852198fd980ae7f8c7d6433acc67754aa3f019dd1957","ssdeep":"192:xmwkMP7EvhcNA5QqIKJ+YIAWfMY4xEZIRmmF4Chy:IwbEpcNAaOWAWz4xE2/F4C0","tlshash":"bb02ae46dfc7cb00e1e45b39a1f31395a08189be0daa570b3dd86f41b9b57c22da3d11","first_seen":"2026-07-15T07:58:47.749164Z","last_seen":"2026-09-08T10:06:23.232903Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-evoplay-theme-dark-1-67d9a358ac343080701552.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.225Z","timestamp":1788861948225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-evoplay-theme-dark-1-67d9a358ac343080701552.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"eeaea2b7497ea75f29c392c7c8f3962a\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:50 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000965e2c11a7c858fc-006a9fdceb-2e3a17cc-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acfRr%2F1HgZUpIw%2BbvhJplfMzYczq1KqwYvlFBq%2F1QbxU31IA2vOTMlJeCCCTIkfk9YBTNWu2GF%2BM5TgI6m9M9mcWkgkWUNhcy%2BE7XQQfBphANgGnqkQ%2Bbl2mpWYDnZCXJTfgUHOOTXc%3D\"}]}\r\ncf-ray: a37d23086fea712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2650,"size_decoded":2054,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeaea2b7497ea75f29c392c7c8f3962a","sha1":"9bc91d650de9057bcce49628c50985fbacf8ae9c","sha256":"b47a5ea14165b08c6ebeca34deaf75661d2e6c9176ea2a2cbe7b92c46f9b6418","sha512":"2f61a49d66e8d36d692fdf11a7a6513571811a411de52c886e5d7dd0a9c7f31c49fae2a2140f0331975f3eef9fedc1ff2d3c5e0ffbd556b521b2d48d678fdceb","ssdeep":"","tlshash":"8c51ba5b9f789afce68fd38dd047c829556638fa7b62e080c7c11a8381a18dd5c9ccc2","first_seen":"2025-11-10T15:09:50.406821Z","last_seen":"2026-09-08T10:06:23.233508Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/35395-sweet-bonanza-1000-game-686d2f74e839f979060599_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.760Z","timestamp":1788861948760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/35395-sweet-bonanza-1000-game-686d2f74e839f979060599_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:35:37 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ab94ca8afcb5afea97853b97e97c4723\"\r\nx-amz-request-id: tx000008ee56ed4360ae365-006a9fdceb-2e41f6e7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FADJ0NqmrvBbcUtq6dsYTv1pCcaHK16vdrVjfYoqpFzdvw5Tp3GnetExxMSZvicI8fBqprHaXVq2OEV5dcrgg3kuS9Xzz4Qj5zld8gzxUFEyqPRVo41jDCJyIsBCqXCwb7udduLYmNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bc88d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34584,"size_decoded":35546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab94ca8afcb5afea97853b97e97c4723","sha1":"9320e66d8e37bef53ea758352ff880e965643d5e","sha256":"0ce0d10c2e3b6af1cdcce9e150ce1ae6002c09ac3017d3df243da1d2da536d9c","sha512":"33559e330235714661dcde3777456cd5c7adc0a9377ad14306edeaaf8056ed9d10dc85cc279e8a7a64deed70d3abb7213771a3921817e0df639ca7327ddb7a0d","ssdeep":"768:bG9xOi6XchWr+7R1ly0d5rIJP+pIZ6Nfe3I1xGnbM3wAwfjcI5LqoMf:bG9MNaFfpNIJP+rNW3I1xGA3wxcmp2","tlshash":"fff202f6e9077a8d7f41923c2dd88aee532f1da9c45cef092028ed15942b497b605cb0","first_seen":"2026-09-08T10:01:53.489931Z","last_seen":"2026-09-08T10:06:23.234452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/magic-keno-685912bc8be86347401630-685d58da79b4c429424323.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.849Z","timestamp":1788861948849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/magic-keno-685912bc8be86347401630-685d58da79b4c429424323.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:27:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dfef80eb39e82692b9d0d636d021ceb0\"\r\nx-amz-request-id: tx00000711221eef69cd84f-006a9fdceb-2e378819-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOeL%2BK%2FhXs07CDdk%2BvmB16EghDPN%2BiXznHpTJbuVGUGUVITxkRKKUWZt2ye2Ms0%2BNszcf9Y0KclgGYB3KAAND%2B%2F1%2FG00bqhdZ2NpJU%2B%2FY7htnE%2FL8M8SOHWeqmiM%2FyFPh657JfGr%2Bxg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58b8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19104,"size_decoded":20090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfef80eb39e82692b9d0d636d021ceb0","sha1":"cb597b061c36e278c1313313854061aa8a5f13c6","sha256":"9870574e89332b348de1458bbbb62af73cb9825b1ea4349a92219396985c036c","sha512":"158085fdf71bf48a928c70b7340b67451711891e3368b5a46e6782cdc36f1b03a0c013351db6314270a3c3ccb31511fe3f47237f27eeb5cb3a57e768b65d990f","ssdeep":"384:YsbugzaA8TK3Yo9vYnkyHkeeFSRnZ4nkIXeGCtp7bl3hP:Qi3YcYnkyHk9Fi4nzeGw7bZh","tlshash":"3382e093532c1310e3740d347cbbc2efa44809c67f5a9bf919889a4a6933d864f98677","first_seen":"2026-09-08T10:01:53.405924Z","last_seen":"2026-09-08T10:06:23.235014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/french-roulette-classic-68596a3022e5e321251459.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.230Z","timestamp":1788861948230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/french-roulette-classic-68596a3022e5e321251459.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 14:52:32 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1b32e392c1dc9cece024789515c8b969\"\r\nx-amz-request-id: tx00000be10fe80232822cb-006a9fdceb-2e37707f-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p66mHCN2AXo%2BmNDI%2FFIlrPwX6GvUeyYsTvvuYjdw6gzRaqz9Jho6AwtnjziixVga%2BWLCCUnoaKx4I6jcDoYqkK2B%2B7t0rpJHn5iblDn737jhZ1iXR8KWAXtAyqhU5wJYWWh1mTdcwO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23087fef712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16236\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16236,"size_decoded":17204,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b32e392c1dc9cece024789515c8b969","sha1":"a938d4477c233134ffe263007f918adac6698a2f","sha256":"e19582c36bba599f36d24af1e9aed022c0131402d9ff5c5ad0c1532dbfb3e0d2","sha512":"e7e71e00ef978c14ab92fef30899c1d8c8ed0d288a2a0aaac493ee41dd1fd7f7b3e37b97e6584cc7c789418b24358f97fc66b0945402de588248fbc35c2e5c0a","ssdeep":"384:w4oJ4JtI7YWtQ40mJcQ9flV0BA1si02I+X:w4oJ4vI73y4E+NCe+KF","tlshash":"c872c0bd76560561227bfaf7a19002c1d2bc288ce635ff281f57a64f56289cb0d68583","first_seen":"2025-11-10T15:09:50.389211Z","last_seen":"2026-09-08T10:06:23.2356Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/jungle-gold-megaways-685940f19afd9735503588-685d5fc31e2d0691518632.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.287Z","timestamp":1788861948287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/jungle-gold-megaways-685940f19afd9735503588-685d5fc31e2d0691518632.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:57:07 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6a13392acd2a866a072516967dddc2c3\"\r\nx-amz-request-id: tx00000d2a122fd577f3e51-006a9fdceb-2e41f4df-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5m5HGkuCsbGrjMH2oNNiK5KEdcAYG0oWoYFlcEwYu5ogEJImRfef0y4izPd0OEmPwMZrkIUzf2haa%2BI4IF1B%2BH25TK8U1AK1rzlTmGIOCfLaDahEpuDFbfioZLtXlia2%2BVRfVB5FA2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c813712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10300,"size_decoded":11266,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a13392acd2a866a072516967dddc2c3","sha1":"377e4dc2e9b337f310bb7af25c4e014ac4ab8b8a","sha256":"d73643489f81a6fcc669ed71fe1a2fbe4ec003661c155f763b21a8ef6937d9bf","sha512":"75383649f0ab8cdeab7c4e6030bf322a8538e2271738b1ed6484325059ae8d2d62296cecf9700e065cffb034e2610a6dd78fb911c2e8f3ad740f0b160ecbacc6","ssdeep":"192:mpnYDLunAJbaWwLsgVM7ueH/qp4DHtH0/1fOMlj5992YRl:mp0LeA1CL17+XG/1fDx599xRl","tlshash":"6722ae433dfe5b32e573823a22276485b46568d827a7538683e0e72017f5b88b3db294","first_seen":"2026-07-15T07:58:47.742981Z","last_seen":"2026-09-08T10:06:23.236152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/playngo-67ecf12752cdd792692482-67ef8720df09f055404141.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.292Z","timestamp":1788861948292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/playngo-67ecf12752cdd792692482-67ef8720df09f055404141.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"89ccf719cad344a4e7ba2f41eb428b28\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:10 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx0000084740efdad3a612e-006a9fdceb-2e3a1588-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVHfwWM8Eu8RgozJQ9mCByzeJwC6t3F8tBiMwzcGihHILbw4q3cX6aw2zDQicXr%2B78uINzTtZW%2B%2BAuiHDfoJGSMjgvoe1iqrXobbTte0GpuLu5UMtugX1h%2FrlurxZI%2FCOm1Kqg%2Fr5XY%3D\"}]}\r\ncf-ray: a37d2308d818712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8366,"size_decoded":3902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89ccf719cad344a4e7ba2f41eb428b28","sha1":"48b91ac62234c2714ce5abce9d530fafeb700c53","sha256":"47c7c1fbbe6c86b6b3761d0132f21695c72e9a481b7c1860ed11f25d8a7171a7","sha512":"0d144cfbb56a6fad58e246991f423159c0760bf659518a1959409312717e42405ad07193523f63641ff5c6bb39ae07119ef3ced77656c6b5b3772d73f6574831","ssdeep":"96:S60SIE3N6Enhfs1Aj42+UJ8UA/6ycGlBiR6nrpKGSJzD2pwqdlDrokQa3VvzoXht:ShEPnpD4Zo56xPQM7zE1DsgQ5RE0Lnxw","tlshash":"a70220f9b2b8c2dc6803eb485e339472092e99b44fb3b2c1abd05d5094db9584d77cb0","first_seen":"2025-11-10T15:09:50.349264Z","last_seen":"2026-09-08T10:06:23.236662Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/money-train-685500096341e854582309.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.313Z","timestamp":1788861948313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/money-train-685500096341e854582309.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:30:33 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8f850cddde654b18305270a37ad0e51f\"\r\nx-amz-request-id: tx0000070fd3e6e40285395-006a9fdceb-2e36981b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NF8qivu45geMEml10cRPI66zq1eqmYKuXirtTtciJHrfNrfcFeuFA7idFsJxrpn%2F%2Bm5GfOnJWaBQhmACn8pRpj870U2ps3UHFXQvHSBucn2B1fBOhVE6VRJwrj8AAS52x92FtZW1f%2Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308f825712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39356,"size_decoded":40322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f850cddde654b18305270a37ad0e51f","sha1":"ebd578d69cab3bb7ab413f0369d042d8aa8daa09","sha256":"b7a46a6f5e5739a3f5c9f4dd44ec5e179c5f03ecc41494ba90e82f7f4939264d","sha512":"2e51cff8d5624ae7ccab1b64d90cefd4c51b031290a209e6a72cb30ee1ef19a7c816924bf8f13b8872f51df66025cc110d9cf32eaa6152a28d31836f5a0a14f7","ssdeep":"768:RLGgHqza5RCsCuoo5wz4ojpjTlgqUgOcjTLxFKOr1+XNlbOPVmw76T8o2oD:VG7MRCJOSzdVjT8ujTLxDr0dlbOPViTp","tlshash":"8103029293222894439dde5d43c32e0fb01edd375bb2d18f9252cf0e675d88635ba52e","first_seen":"2026-07-15T07:58:47.84373Z","last_seen":"2026-09-08T10:06:23.237234Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-spinomenal-theme-dark-67e317516fe75558565274.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.316Z","timestamp":1788861948316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-spinomenal-theme-dark-67e317516fe75558565274.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"4163f41dd9e5d5d1cdb250451d640aa6\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:36 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000003dece8382150cca6-006a9fdceb-2e41f6e7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Up5N1YLJX9QVzfqaQaznzYzqmckUg1GQm1sCQvKdX%2FOe3zMj84SQaGd8lhg5a4xD9YJtfqI5DtrhoYEAOMPLvcJtWooJZmQBH7Eis%2F6ZcitztnU7pFOyXgoRRNoxXDjbwDcnEmNdao%3D\"}]}\r\ncf-ray: a37d2308f828712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20599,"size_decoded":8180,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4163f41dd9e5d5d1cdb250451d640aa6","sha1":"8b828b9504e0fdd02c145db289d1eac60f13c329","sha256":"cea77d999d0c0bcd6ffbeee3cf7fbe8f5f34d8021e4db6e77a5cf1844ccca587","sha512":"6f447d9cfbab6b419b9ab50eaaa56bd1ead14a2da5fecb373a10916bf23ab3a95759122b0f905aeab7403dda4b2ea1a02c5dcc3a35625dbbcedc25624f15788b","ssdeep":"384:782BuykOrA6DPfzL2qGn7PyUSILzVtufNEf88PpGr:3hr1DjcLFqNj2Gr","tlshash":"5f924069dbb8d2e8e749bbe59e17ecf581435dfd3a33c0898ac701a188500ee5824dd3","first_seen":"2026-07-15T07:58:47.818458Z","last_seen":"2026-09-08T10:06:23.237895Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/super-andar-bahar-68550a57c4f62851161208.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.798Z","timestamp":1788861948798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/super-andar-bahar-68550a57c4f62851161208.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:14:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"25f6f3529214c818ae32b8182cb102ca\"\r\nx-amz-request-id: tx00000512db19959183cbc-006a9fdceb-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIATyHEmQE8JXIdl0rGfP9LOqovz1sxmxmUrSV%2BJUAN0lFnPeccn%2FAeZFNeTdPjBM1ypmpJBSepkj4pmJ2lS9c6I3nFmWFH02tPR7YIbCrMRpR9Z2Q75vhOl6lCPK0FmDXcMIZVd8zI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf89d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13544,"size_decoded":14508,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x197, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25f6f3529214c818ae32b8182cb102ca","sha1":"0f88f4664b81a85364a3e9c2958f80153662e30a","sha256":"f70aefaf30d176c49185ae19ca5c8c40b92b7629e4854acb9b4f9e9b1b2bfd67","sha512":"f45f276aebb762eef7608a88a62e595273895c084eb95e32f4c04bc3e7d58966c08af41c37e9432274b97749d61cefc1f097202400631d61075232eb66f64230","ssdeep":"384:gQUL0Q0i6NDuMHz265W8vqicJyELg4JpFXMfDKZx:gQji6NDVHzDM8v0FVYD6","tlshash":"b552cf4d45d8b68a907ede58475e6394a3d72818035a15c3a0984dcc7bbed3b3b8cb13","first_seen":"2026-09-08T10:01:53.390701Z","last_seen":"2026-09-08T10:06:23.238545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/lightning-dice-68558c902b2d1962605045_371x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.804Z","timestamp":1788861948804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/lightning-dice-68558c902b2d1962605045_371x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:27 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2d184bbac716de160774088fd59555c9\"\r\nx-amz-request-id: tx000003c1153b7bada1c19-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH0oBsNzxgSLZrmiH4xF4AFuKpQnuUP0PG8%2FWsOwHSgEIKfSdUeEqyWpL5v7lYJ8Obq45eKO86nMBW7rK7mMyu71OeVtUzPX8UMWcH98Rz7hG2E5sFZRCHY4tBOQWQP%2BnHHKvkDZOUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c08a1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21600,"size_decoded":22564,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 371x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d184bbac716de160774088fd59555c9","sha1":"74cc9f003f5ebe0b6a24757a9f781b929e70b258","sha256":"5377dc495150fe10c8bcf7a1ad683171ca3ee851c318340bf3a227a712f40caa","sha512":"21b6bdae7cf059d0ad49b11e6326f16b229a966133869ac88e7442eefb4f4e53bbb120c48a5c2fe8fc8e6b45e3be3a3925944ec1267532431ee7ceef4b85b675","ssdeep":"384:lHpEs+7woh+yGlpQFqkRax1ivhcwyZjsaOa3i6xPAF01xaytJIp:B61hlDFr61ivhVOx//3Oyq","tlshash":"e7a2e066c6dc47ddb1b0a55fe26e01bbc891d2521ea8bb2fe2607f2170f1d900a32617","first_seen":"2026-07-15T07:58:47.683275Z","last_seen":"2026-09-08T10:06:23.239368Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/big-bad-wolf-live-685508729b32f497268446.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.302Z","timestamp":1788861948302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/big-bad-wolf-live-685508729b32f497268446.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:06:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"04bd12afe62c13ef56f528128c9d249b\"\r\nx-amz-request-id: tx00000180937d32a3bb7f1-006a9fdceb-2e41f4df-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FnAG9AQwr2cFxUfpYviVNGYvBba5bXfCZiZgQnTS9mfJAup4WN0fJ%2BjSRyTvNopd5jS14wQFn%2FJJwOrylaEatEMB2OqiXG65i0ALWpf%2BenjdPA4oseBzmAtneN8%2FJoP6KdzI5IlKGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308e81e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 110100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110100,"size_decoded":111071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04bd12afe62c13ef56f528128c9d249b","sha1":"02871775ba60c03f887622aef9e16ae0a1c160a7","sha256":"c4466952eda0e09ede6d98bd4fcde63b5125c80c758b9ebd882de0823a082203","sha512":"145935f26bfac6a329f6b4beaa918214b81d4da70b1b5aa3bb6f098d7461e53f57efef545d75b64c7a4e6ac0596ea7aadaad9043fce7528d262e51def2c52a01","ssdeep":"3072:YX8ygVRhW6nKuhlrWf0STXe0TufxduDw2G/6ufb1op/f:YX8ygVC6KuhB+0gXNTuJdaw24pj+f","tlshash":"4ab312402410dda2b887a65e596cadd485eb6b752fb60870bdb5f6b20a3cec4d0d98cc","first_seen":"2026-07-15T07:58:47.780098Z","last_seen":"2026-09-08T10:06:23.239953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/big-bad-wolf-live-685508729b32f497268446_416x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.800Z","timestamp":1788861948800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/big-bad-wolf-live-685508729b32f497268446_416x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:35:56 GMT\r\nx-rgw-object-type: Normal\r\netag: \"0159af2ca57b24d9dcaf142348ea41e9\"\r\nx-amz-request-id: tx000004c1112f2b9a2e637-006a9fdceb-2e41f2b9-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKBZtH8ThU6L4DGPNHE1BuAZOz6d8Cz7IX7mDz6bGk3iRVa%2BhJUx6L%2FLNCJlHwY8gOsUEbBeYdY5ngwp%2FqXPGsI2BYGd83vvyNERoiqoHIfmwWqWAr0xiU%2FlUndJ38%2F6mKKG3%2B9w%2FHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf89e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34580,"size_decoded":35554,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 416x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0159af2ca57b24d9dcaf142348ea41e9","sha1":"062554ee6c6471f7cf84a9d82ca68ee02b543b64","sha256":"72cc63d63f87ab65677829ad82110bdf00b37989965dd31622becbb87c3a033a","sha512":"2a0731100afc47c28fc1b6b86ac16f4fa694174595a63c8edec3f9f8b5bc5f6a91e50514c630f1a06ca5ba1ffa995d662f3c87ee1d7b5b74138396887f41fd8e","ssdeep":"768:t2UfEyXO7Yri/o6J5egos/HvwFCi95YACtUCnnXmSWSr6kPmBf:dcUm/oSeKvvwFCis2CnXcSfaf","tlshash":"e3f2f16bc58c2af250ce4ca4213f1215a48f521a897fa4ab5fdfcd2653f1660bc386d1","first_seen":"2026-08-08T23:54:59.167145Z","last_seen":"2026-09-08T10:06:23.240471Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/ruby-roulette-68550a1174b54906132742_362x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.805Z","timestamp":1788861948805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/ruby-roulette-68550a1174b54906132742_362x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:36:16 GMT\r\nx-rgw-object-type: Normal\r\netag: \"cda60d7e3c7602d7373dc7c653907086\"\r\nx-amz-request-id: tx000009b5c359698162d8d-006a9fdceb-2e41f6e7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJzBmzaCdkC4kyV%2BMVhP%2BqcQjg%2FJJPvuBV5uVZtVjRJOfPozAc3NXbcBOyZHArlsENaQLDwaRua%2F3ZoT%2FhipO3QDCN0Co0QerKWnOiygZ%2BT5BHT0UAoZBSqkOcx8FYyhAdyltEuAbyQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c08a0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21648,"size_decoded":22620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 362x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cda60d7e3c7602d7373dc7c653907086","sha1":"f78ab047206df8c032d07ef73ebf41bcb91ed2da","sha256":"31a3b56f3f641f955ae66b09873006729335adeda3611033ce4a320c5e715bcc","sha512":"3033415af2fb6676ddb414e5c0a1022d754508962ee2452ca3d6064f309a89d06218a87bee418cf21db8251f94ad3ed2b3b4f2fa5b03e194f8ba611695664d79","ssdeep":"384:yZj9LpdB2Ew3zOteIFAcW1pEcHm8UNOhTPC52x1TsFK3qFotXhC14dcSQ0FRM8BT:yZhLpdAEBth61pEcTUMZL1wgJCZUpT","tlshash":"89a2e1083d5b0856d63a6bc78721737592e56ec00b355ead1d3fd0bdc81bc087ba0b68","first_seen":"2026-04-29T02:33:08.414781Z","last_seen":"2026-09-08T10:06:23.241005Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/spin-strike-6859138f7b9f6360612438-685d5946a2d3a112290226.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.853Z","timestamp":1788861948853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/spin-strike-6859138f7b9f6360612438-685d5946a2d3a112290226.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:29:26 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9338f558e71500b6c20c16a326e5a51d\"\r\nx-amz-request-id: tx00000503f52801986b1e8-006a9fdceb-2e38c94a-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTK6ZFQdcC%2BrXZuu4d2Hj%2BFeii28Ay0u%2BHyUj3uITo75OO%2FG5JumlZ52r6gYXp7VDY7jPIVP%2BJ568j%2Fhp%2FZSK%2Fu7Txixq10HuO%2FYQcwnS%2BGhZFEw26Qb1%2FlMwafcMpR1SrapKcT8i%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58ba712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9908,"size_decoded":10891,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9338f558e71500b6c20c16a326e5a51d","sha1":"b9372574d82d24ad516e2efa6950c0009214f761","sha256":"996749a358a241e0e9367516a739a42d0b5e46d1cf2efa30f659e3731a9357dc","sha512":"4a03b793cb115206a578de28d6d47ac63471196dd4c0ac952ad338eb1c58fa715e11ad9677a6f0d8ccb7f1e600782f2a4d97a542a085133a699cabec5f9cd354","ssdeep":"192:PS0VRD2ocle2mLU5kMzWE6jsqUH7HBeRYKtZ/UHbnEQMBe6:9Vd23v2DEzKtlU7nme6","tlshash":"b212bfc9e751d414df08af7c50fa8fc702d1f03f1892366991a5bb122a50a9c6f6eb25","first_seen":"2026-09-08T10:01:53.454699Z","last_seen":"2026-09-08T10:06:23.241577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fortune-gems-2-6854fe6d1574a045407987.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.769Z","timestamp":1788861948769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fortune-gems-2-6854fe6d1574a045407987.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:23:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"becfcad591e8599de6c52a182f648732\"\r\nx-amz-request-id: tx000004c2cdc5f79bde6d6-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9vFCMccUESlr8m3xcw5oT82Sf5xSjzghDAmRIiqhZHddUKAb1NFBoT8xPS22Y%2BIKab6XyLyX%2F%2F9%2F1bg9V1Vphb814bptDQK2MBqdisemHIUQUz5rAsSyn3FiMIKjmEaFomrtd9aLgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bc891712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18424,"size_decoded":19392,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"becfcad591e8599de6c52a182f648732","sha1":"9144259c32d41a99532da576ab3338e2030e6730","sha256":"17fd893e6324d78b71d2ceebaea2372751f3febb87ed65dc9fd9446957e2f64c","sha512":"8dd5c5e8626a79292fd5e8c6bdaebd4030174979fd146dce0bdfd86e9cff2893e59db7b7bfa599648cb41d1843be92b1f09608db1489cbeee5ea344aefeef81b","ssdeep":"384:110YoLdUjx0MZFVxoPTOoW0wCiJCK3AbwtJttFNrzDekmMbt/8re7:70YG2dhVyLi0wCiDWwtJzDrXxmO7","tlshash":"e782c0b9709d3abb1dedeb5a38c14cc24561f447383502a48018e7293d7da909f3bf8a","first_seen":"2026-09-08T10:01:53.451855Z","last_seen":"2026-09-08T10:06:23.242504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/evolution-67ecf1f411c7f811344669-67ef864bda727078962641.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.218Z","timestamp":1788861948218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/evolution-67ecf1f411c7f811344669-67ef864bda727078962641.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"b739a14aa1a1615ef91c3c4aabcb3669\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:48:03 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000002b7d94a8d56023c2-006a9fdceb-2e37667f-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDsnmvffGrxQWFB8v2GRF72B3y0l1iLOGlIqDkdbfGoFlyndiD2yQ1cyX1iQqgadNJTWbJ4Hys5mOL5BczxvDaLpB0UGRg0kKktsp%2B%2FsaqIHqiPLENi0%2F8KwDwhJBEHR0LLPRJ%2B9iPo%3D\"}]}\r\ncf-ray: a37d23086fe5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2773,"size_decoded":2095,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b739a14aa1a1615ef91c3c4aabcb3669","sha1":"061e2e1b1dd7d3095e4472e95e5f23d51d588209","sha256":"fa655a6f6ab21991a2b6c74de4219de38f06353963f4d2cd78ef4769a5c75866","sha512":"20f6f51638da68abf0a405ae887a6c8a681216859cf5ed1a980275e3fdc24255771073ca07ee0f35d648583258ccdc3901ac3eb12e7404ed3486cfa23f234969","ssdeep":"","tlshash":"d95151e4a78ce160b50ab77aca2b74693a6530f4ff4352e0c210550cf991cfacb9d9c4","first_seen":"2025-11-10T15:09:50.346791Z","last_seen":"2026-09-08T10:06:23.243086Z","times_seen":24,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fire-joker-6855323c1892e486562439.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.299Z","timestamp":1788861948299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fire-joker-6855323c1892e486562439.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 10:04:44 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dc3ebc1e4ff3940b34437e144420ba80\"\r\nx-amz-request-id: tx00000e551066cbfb91e37-006a9fdceb-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJqwmGMsb9h2brD6aKlS1OOZK6GD1R%2FoXool%2FhWBeIjrEYRK9bNMTytLbj4U1k8UJylXZj0rBKJ0O1JpPjTbEFbaxfsMT6iRd%2FNkr%2FryCB2w8XrUicCU5XNp18jev09SJH%2BgzhASICw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d81c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27738\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27738,"size_decoded":28708,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc3ebc1e4ff3940b34437e144420ba80","sha1":"9a915325ed15fa64af32dd8f6c47bb36d6c12703","sha256":"5bef0da6772944c18198c41a4b16d9e8c5536395bf1fdb02dccc79c2099f1e88","sha512":"fe6b733021beab875be366e8dac28c4176ca4071d51121476947d236880bc67000e8d8d5d50a22ad151b8619db63cbe687b1ed712ceb93fe75ec3526649aa8a0","ssdeep":"768:AV8sDjfJXKzvhyxPKGXuaVAN1kZWzilQdAnNe1Th:gbDmvEVXuaVzZOeQdAn+1","tlshash":"45c2e19d261a40f2b877fcfc38ce9455de8f3114cfa55928b6a081ce6e663b5e00925e","first_seen":"2025-11-10T15:09:50.364095Z","last_seen":"2026-09-08T10:06:23.243636Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-playtech-theme-dark-67e30bbe6da90379815461.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.300Z","timestamp":1788861948300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-playtech-theme-dark-67e30bbe6da90379815461.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"60fdbd815bed41643bc3bbd0319e6ffa\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:21 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000a62a42f5287d7173-006a9fdceb-2e378931-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bpl1HhNgqkL8nmYSOjPU6r1Y%2BWIfsaWv2eS%2BqE7lA31vYIIIuD2dSzf%2Fd25wn3NRgWfTw35UvNF0wFMFVxjfvUz5cNdDsNMOLbNTERUTCfcMQdsQhoZ2gbgnjSw9z5o7B9OYhmwn8Hg%3D\"}]}\r\ncf-ray: a37d2308e81d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22098,"size_decoded":8794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60fdbd815bed41643bc3bbd0319e6ffa","sha1":"cae92025a7379e8bc0aa54b36b6e6cec6e72cf66","sha256":"8b7b844930cc34e834d26c51ee012f2fd5bd84054f634abdbea84463de1406e2","sha512":"1a31bb322946e1beb6ff6314e468422282d29b354b2b2d0c3746dee453b94755fa9853f8ec23db71fa04fdf04d932d364cf36ef993ff23e1eeb4ffa70fb3b662","ssdeep":"384:N00oVaIsAE1sSYQrp+EnSNfDMoDmTMvouonFlnt7q9DvgKEd/yJ6Vgh4:8odAEVpdnS7zXtTS","tlshash":"69a214999ff8a2f4ed1573cc9562e872b913247f3733d8a0c6c36994a5414cc69e8c87","first_seen":"2026-06-13T06:37:50.555933Z","last_seen":"2026-09-08T10:06:23.244154Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/blackjack-neo-6859697ee55f1774239777.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.314Z","timestamp":1788861948314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/blackjack-neo-6859697ee55f1774239777.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 14:49:35 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a10dab51277a1f04c5e47cbe7189c99f\"\r\nx-amz-request-id: tx00000f4e1a3d7c014b1c2-006a9fdceb-2e433674-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zO0oOTFoafEilmb6gUlw30WGRk0rRAYEwsZJgdpeZHdzue89n%2BYlL2P%2B8MuWes4qbdfIws4iyXX2BuaFahLbtLBSoKVe22cHEqKqRxSGhV%2FQLrzH%2F5NJP%2BSQkTD59ma2sjYovP91%2F6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308f826712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23450,"size_decoded":24422,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a10dab51277a1f04c5e47cbe7189c99f","sha1":"d2f46bfbeae4b9e31de6382dec5610c9c8bf4e27","sha256":"33fb12d043a3aeb6ce03e4e54ce1b90c599fd3a7f0afc892aff1f0ece9cc7172","sha512":"8f178ea2345d57d2baeaeec841f7f6d1e0c0b057775cb7c79722d2fbb071077d8a874b9658794e8ab722ea51ed0e6616f41f62ec5c41cd56c8f1d28b32b1aec4","ssdeep":"384:arWH1dU2fQPqHkWOAAK8TnekQQNufXr1SEwVcJNeezcYDQAXToMwB1iCvy2sW7u6:a+VC5hK8Dek3upRwVuqBfB/vynWy6","tlshash":"86b2d1afbe414d699a6b58c98c5583b40477e1dab0cd693747ff2a1214c0c60d9b2bec","first_seen":"2025-12-08T06:56:23.191627Z","last_seen":"2026-09-08T10:06:23.244689Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/european-roulette-christmas-edition-6859090264864990214358-685d525364433421156963.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.318Z","timestamp":1788861948318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/european-roulette-christmas-edition-6859090264864990214358-685d525364433421156963.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 13:59:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4a44fe95faf3804076b8bb88d86f5278\"\r\nx-amz-request-id: tx000005e10772c9dbfe117-006a9fdceb-2e41f255-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyen%2BKlxkuh7Z%2BFbNfGqbmszglotuFH9rMVCcQUBcPoC3JQbeiZkeaeH5LBoTLXn7JXZPCWZt7%2BJ9TJZWd9qaCSDEsZuQRW7OAbTWOCBIn4ulW60vWRIwXTvZwhAukR%2FBj4tpUI%2BIIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308f829712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11788,"size_decoded":12758,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a44fe95faf3804076b8bb88d86f5278","sha1":"1e02868c10930e306a4bef22c311516334ba10aa","sha256":"c88cb452f3f27f5a3df683624e22f3ed512e96874a179236e675df9fc577455e","sha512":"ed4bd8385ba339771e149748fc9f7b4722b477b1a28f98904ce41d76e204efe62b699a40bde23ca6fe0f6fc3a372b00b15adb7eeaeb1a40d89c5373e0332327e","ssdeep":"192:IZJ7i1gK5/JAC5XsyFuUrRSRp7r9Af7G9ZnJhlyGZfeAOyo1TuY4E4hOOvW:IZJu1rdBsyL4p7ruIjfeAOAY4Rha","tlshash":"be32bf80d18240b4e6025cb4a8d3bfa7e762d6453317b94e8c505aec7dd941bad4bd36","first_seen":"2026-07-15T07:58:47.826342Z","last_seen":"2026-09-08T10:06:23.245242Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/wild-bandito-685571db4138a123265585.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.291Z","timestamp":1788861948291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/wild-bandito-685571db4138a123265585.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 14:36:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"647b278fcb257aef13be335cda2f7811\"\r\nx-amz-request-id: tx00000db7a1e90eef47a87-006a9fdceb-2e369965-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSC%2FYHAM5hucvoJDkeEf%2B9swSbV8e9yueK3SWwfPFdZ8zKa5Njb5rFmECjxgkcc%2F6QOviXJzvW1lX1S4IedUwDN9fxWCDyC6PA%2FU5ddEOaxUVthFoNNCud9OI8tjVc8%2FrH7SFWFm4pA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d817712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21758,"size_decoded":22728,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"647b278fcb257aef13be335cda2f7811","sha1":"8949966c8ea02df57057fb861c0367a47694bdc9","sha256":"3eec43ef6b04fbbf6f4d898acdb0252ec711dd6a9cb6c71ce2394eee1f3d8042","sha512":"d14e425096855b12857d6f9ecf018d812ac018143b5234e89b78ad150603ab3d4964c0e7e07ea2815686fe19063e828496d18d6cfd5a16a6884b7983e468c421","ssdeep":"384:VxIv2Z6dZgUiNJxnufpQMUK5y7pQockBZd3xWvOWLOZfWb16uk3:/ADgUI3nuhrUK5y7Xck9oWWKW6uM","tlshash":"8da2d046b656a20425f94871a6e6ec02d345b3b8bb6eb22075e723de017e52f284b168","first_seen":"2026-07-15T07:58:47.812445Z","last_seen":"2026-09-08T10:06:23.245752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/legacy-of-dead-67fd2be2191ca545468439.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.294Z","timestamp":1788861948294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/legacy-of-dead-67fd2be2191ca545468439.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:38:10 GMT\r\nx-rgw-object-type: Normal\r\netag: \"2f877280a97a1a8e4203c03b330936f8\"\r\nx-amz-request-id: tx0000027bbc5f9929692ac-006a9fdceb-2e3a166e-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qi6q326Hy0ayOZiOzst2KihZQ%2FTE6jdP19VW2I%2BsJ7%2B2F2NcM2D6wAOsVVkhcWKv6X75Y5qGoV%2B%2BP8XB6uENaQytDXpSL4y1E4Eqd%2FNxZeykAyFuriWxXivcdlCjhC%2F8yTpM6T2HnIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d819712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10838,"size_decoded":11812,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f877280a97a1a8e4203c03b330936f8","sha1":"df6efa9d4938ead33b1728bc64c0b324e57028a2","sha256":"ff122df643672cadae04e24de0fdd7cf9fa9571cfb34dd70de8d2cc7b2ba3912","sha512":"4ea266ab88e3ca3c93d8c5b30d577c75311fa4f837b33d1ba243faf9f46bf1c8ad0fe85693ab6932cc3f5e05842c744f19d688aa6c8c0cb99f3723cdeb973a28","ssdeep":"192:nOKeFMwcgHa81drGUvbHwBbQ+3IFa81rzbrfa1Vbj0EecdVMkDUraG:OKWMcHa8S2wBbQ+3T8pnra1NjrTdVMj","tlshash":"d622cfb75fba00d0064713e4ddd670b03e1c9472dad13b46e8ea6f5781b9cbac12896c","first_seen":"2026-07-15T07:58:47.63786Z","last_seen":"2026-09-08T10:06:23.246259Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/book-of-ra-magic-685525b839f29576358865_365x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.791Z","timestamp":1788861948791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/book-of-ra-magic-685525b839f29576358865_365x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:36:46 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7fa881f1e2b81a6ae011d2bc6a2ad951\"\r\nx-amz-request-id: tx00000fea189f3444d5235-006a9fdceb-2e36326e-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqzepTj7X5qmmVYnua41D0gboAeH%2F2Z6MnIUI9jqRgp4ehbQTaKOzDST%2Fmbc%2FzVpHAmkFMwx85ByXt%2BXf9E1lUj7X4Ex3BRjvA3utJ%2FNXrRdI%2Fxt%2FRGFP2TR4lCK2xmsbw8Gq%2F2MlQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf898712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26762,"size_decoded":27738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 365x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fa881f1e2b81a6ae011d2bc6a2ad951","sha1":"716383213290d4ef324d25011d43d8fbdb235116","sha256":"56a18cf84b2c8256dd0df5e821486cf080f598163c045693a71f17d53e0de737","sha512":"9a10663098c6661c45a7a86916e681f6454cc3e63962577c77457ee172a2c98a661e4bccd6ecbf189c9592d6b9322c061049ea56d6111694c14c374ebbb7f9ae","ssdeep":"768:Q3xIDmWnVyxKe8+SFIsN2bUbWlwrCFXeAh18HB6TOQ:QBmmcoxK4cINUbgFX18hy","tlshash":"3fc2e174b06958489d103e5f361c807a597e0db7a05b2344b8c635ce67fe4ab13789bd","first_seen":"2026-08-08T23:54:59.058355Z","last_seen":"2026-09-08T10:06:23.247119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/mega-wheel-68558cfb2d727937412853.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.793Z","timestamp":1788861948793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/mega-wheel-68558cfb2d727937412853.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 16:31:55 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b5a9ef6b6246b3229f3956fd19fcfce3\"\r\nx-amz-request-id: tx00000fa1e10e32f591ef4-006a9fdceb-2e362ebd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=168pWZnHqCb%2FLIy3MllLsE2zM%2BpzfciyjlkUemHSD0cA6sos1S8ClCDDm0zCt%2BCCmnkfP8RxV9wddkarwjoG6s5IBJZ7N%2BxAZhQbeNQpTfuFga6Qb7GHnCqxR7tLReRqrKNyC3Iq9Aw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf89a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16882,"size_decoded":17850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 259x194, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b5a9ef6b6246b3229f3956fd19fcfce3","sha1":"6fc44f3650ac99bf420a0b43374b855e0362b3e3","sha256":"87c29fbaa98c2fb3bac6ce74d19f8bb0c874252f5a1c4d66acc5730076d61a13","sha512":"100bc2a4c4c9dc6751400b0ebbbf1fe635746f658ceab34c9f0999cfaaba37d776c570bd66350c7b3f02e7c5a5c6b08eb8e3cd3bbfbaee5f9e4da02f7e035b4e","ssdeep":"384:ORDmvIaWnZpU3tyXQ+vUmHjWLI6rly9Nr/aP:OpmA/ZsiZv/jQI79NDK","tlshash":"ea72c0eb356674209cc27b86f652a4820ceb5b413909f5d577bdc6970e5c023dcf22aa","first_seen":"2026-09-08T10:01:53.474724Z","last_seen":"2026-09-08T10:06:23.247738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/crazy-time-68558b057bf05305786243-686d218b46d54253888348_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.801Z","timestamp":1788861948801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/crazy-time-68558b057bf05305786243-686d218b46d54253888348_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:22 GMT\r\nx-rgw-object-type: Normal\r\netag: \"87f028effec7b1ecd9bac04ca494dc4b\"\r\nx-amz-request-id: tx00000d01630bc815df1eb-006a9fdceb-2e376fd5-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmkvykd1D0mCmDFXXjtnoSwoMAeVLvf9w5HSNAXF9k8wpgLZD70IgTQ6JN6a6SoWFoTrqXcrSit%2BOsXNIWY%2FiPF83ahyiGqEFZX1xaBzL0xH8O9Cz8wksLY5iIlvvfMN5wNhsO7HBBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c089f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30164,"size_decoded":31128,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87f028effec7b1ecd9bac04ca494dc4b","sha1":"1c99f7225a02c523fc541beabad42260a87d09da","sha256":"0e0a75355a39ced71f3fc16f708cb8d889cd6901e314821754e6b6b0b33a6476","sha512":"d5ab85aaadb820524bc25e4eaff3e915bac9c63781fdc6f6d91dac1198e849f8b4dab25d29777fa6259fd15acab1d66395e8b129650c8ead1d6b5f936d004217","ssdeep":"768:YlqVNwfJZect4WDis83Q4KyNNtAzWjL2nY2:YAVsrectp2s8A4RdSk2","tlshash":"92d2f1c7e163746a11a4a25c234d3b9b5e461471bbc7b90701d71dc636fc50b3de2aac","first_seen":"2026-07-15T07:58:47.772375Z","last_seen":"2026-09-08T10:06:23.248326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/xxxtreme-lightning-baccarat-68558ea9971c5458782933-686b7228f1f0c212617233_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.809Z","timestamp":1788861948809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/xxxtreme-lightning-baccarat-68558ea9971c5458782933-686b7228f1f0c212617233_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:38:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"27f0782d7918ccc6db422a803b2f5dc1\"\r\nx-amz-request-id: tx000007e89ea80a6df9654-006a9fdceb-2e37d753-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtgLHCOI8sh8h76HEzcpMvgv1WKt16mQFMaLCBnlfJkxlPSBF1UrkSXrRMYbw9HsiqSaajQhmbOmjgqWwg6umwkFtW3FDo3wtmYlGQh7RbKb5JSV%2BsCpcLjnTub5IUdtJwC9k8htr2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c08a4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25688,"size_decoded":26650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27f0782d7918ccc6db422a803b2f5dc1","sha1":"3e357beb2a508537f1a57fcfa6e35161ce8b1cf1","sha256":"474bd72f5a9e5305fb6808adb8ba1784f73173aef7198426b7b218dfbe6f71d4","sha512":"d1bd457e85d179a359300d5d66d0132246e749fd7520fd16d4ff6cd40ce292a1c3a30e8bc9232e3cb4388faa89d6cba60e3e6c75365c14ea02c164474c568a54","ssdeep":"384:rMgSUQT6R/2qxOqrOal6r9c4dig2F4c30eLaGuYqYp5b2Hl5L+HkQx8E3doU:rmU52q4q6a4r24dPU4chLjuYqyY+AU","tlshash":"75b2e1a84fe9599337e058418fe0f816d548f50b0b3e47b8b8ee4b538c3a54e7934da6","first_seen":"2026-08-08T23:54:59.200874Z","last_seen":"2026-09-08T10:06:23.24886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/bgaming-67ecf4d660d63321902838-67ef86078235a717288505.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.207Z","timestamp":1788861948207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/bgaming-67ecf4d660d63321902838-67ef86078235a717288505.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"3501650601335dd3d09f72d972bc26bb\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:47:11 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000002f02ba8c7c4085a1-006a9fdceb-2e363327-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Gfyk%2F2nb75v%2FnXHWqZ1ETm8rUIaAczwRu9107InP47BzeXN%2FEVoaa%2BB6ZMoyZ400Z8a6ftJmxow%2Fla4TsbR7U3%2BiZXBFDpIj2y8lQOI2FuVp63xqycLN%2F%2FmtxioKozB71k%2B6u2k%2FrE%3D\"}]}\r\ncf-ray: a37d23084fda712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3802,"size_decoded":2439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3501650601335dd3d09f72d972bc26bb","sha1":"592eee9497bbfaa85fe8aa3e6018878d1ed82ef3","sha256":"33ba400991d2fc90f95669061b4305aaeace47e232fab35bb04f93060ef25fb5","sha512":"f36bb8c4578adac794f1c4cc1737132d1e11aa07d8aeb3f1c2b20d48022e20f3cbaa2d3dee0dcbbf82f7759c563df2274bfe19daee11e74d3615cf7b42e216e2","ssdeep":"","tlshash":"6971fcd361b451c0544b0eeeeb26fdf5f72b2cbe1f94468060da8d0660a0194ceb9f2c","first_seen":"2025-11-10T15:09:50.332308Z","last_seen":"2026-09-08T10:06:23.249348Z","times_seen":18,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/first-person-xxxtreme-lightning-roulette-685962ad5fe1b710339261_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.822Z","timestamp":1788861948822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/first-person-xxxtreme-lightning-roulette-685962ad5fe1b710339261_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:21 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c940fdeafbbb6fa3603bc2d42947f46b\"\r\nx-amz-request-id: tx0000015571aa7bdd2041a-006a9fdceb-2e38c8cd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mC237KRFyAUwBgN2BLNGcZ1YSBwlVKRCWMVedSn%2BRZN6gw3a2nSmWki81DyebDupk65O9Wqz3ha6%2FRnzUyfmnF2eJU0eEslknJxce5EoMN1Ld4CQFOyDf56JYG84ZATQHk5hjbt%2F%2Bi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c28ae712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23680,"size_decoded":24648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c940fdeafbbb6fa3603bc2d42947f46b","sha1":"ac64bea671374f518ec10fb4bdf6de1b000d331f","sha256":"c2b897b662e877d19b798a9772479c9f37e282b2d043a613656a986487ea69a0","sha512":"b70f0590f87b6c61f4d8d4e06a2fd1dd378369d13d425999eedefbf69f928a2f34be81fca1bcec18c6fecaa40d9869a8142d624ed44b1e99d0869970ffdb2ec6","ssdeep":"384:VihLWu+4fFFISa9jM+5YuXyKr89Xg96rbFqGFM+E5PKbSLwT/bScCu9:ViEwQ9g+pX+GIFi+a3LMWO","tlshash":"74b2e1263de9bb21ff8904b63117b5ab427ec12c654628f0bccfd552b2f406264612ee","first_seen":"2026-08-08T23:54:59.127835Z","last_seen":"2026-09-08T10:06:23.250025Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/bac-bo-6855083fdbb93952036809.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.221Z","timestamp":1788861948221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/bac-bo-6855083fdbb93952036809.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:05:36 GMT\r\nx-rgw-object-type: Normal\r\netag: \"95b1ba8547eeadf4499aa0bb9e128607\"\r\nx-amz-request-id: tx00000b50ae515e8634140-006a9fdceb-2e3788d7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=In%2Fve2wjTUuQX51rPXO3pPGtBAbm1z%2FD0LicJgNyr8jf761gDaL9etLoR%2BemA3jEY1EryxvjKuEHA1lKhlYwpzc3N69bIWc1E76j7iv6Hj0tzbV%2BQoYqJ%2BFPxayjJ8WFuQkhga8%2FisQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9910,"size_decoded":10881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95b1ba8547eeadf4499aa0bb9e128607","sha1":"e912e7b42fb205ab921b5035b93b2ce06b81f78b","sha256":"1fa605c9eef7edec26d00b6e04ce5061a8a57c55f09c7123b4068887cc6ae122","sha512":"310fa255491af39649dd6b5948fbf26e228bedb28ebcf22d8985c585816ff8af68f0a4cb2ff6860ad7c466c8bfff5733bd8f52772fc47e011e21be5f3ce0c8f6","ssdeep":"192:waG+W2v6wOwLIPyUlday6ZsgUyyqAenn5XEtBnGC8PyD5qRzehMZ6CgR:waGL6610IPtOZsnWJkBGC8P6qRWMZ6Co","tlshash":"9912bf34f283b0b1f85bdf99e63ec34b79745b4e946a13d836307063a9c8518246d84e","first_seen":"2025-11-10T15:09:50.413197Z","last_seen":"2026-09-08T10:06:23.250513Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/gold-rush-68596ec64ef94261144967.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.270Z","timestamp":1788861948270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/gold-rush-68596ec64ef94261144967.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 15:12:06 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f8e247ebc8de8cf9ca6b2156c38e9a83\"\r\nx-amz-request-id: tx0000089996f934a74d22c-006a9fdceb-2e3787dd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWchHiWzgS88j3tOIw78zwh4U2UV6OkyL4M6T8mG0BxEwThe5wY9mSCjBhjfwzD81IzcZb0VxKCRNrlYWdPxN1EgQD72jQmzbmsLebN1N%2F%2BfRfz8oQL21aEO4uqGEhgiq84xtdE3bw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308b808712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34292,"size_decoded":35256,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8e247ebc8de8cf9ca6b2156c38e9a83","sha1":"01fb17ade13b985bcf3305ac25e2051195c631a5","sha256":"faa5f2731e3324f9489a8cf041983a0d36e6ac023b0ae9a3b0ea693353c2053a","sha512":"48f42b531fd9df7c9d2fd971bd1ca3dad9027ac5999ce90c9fe9e03e2129da9eaa34f128916cfcd9be9fe1bbae6794489c45791e057aa54eaa249086b51fe19c","ssdeep":"768:Lwcp7UPKaqfaFa6ecGMRLuT7CJp7rHJ3GcKQPACmT1ejl9wd7FlXK:LdCK3aFJPToHCX1GcYvkwd7C","tlshash":"bff2f1cf604e79d7a21415addcc710b974173be8b282eb3998337d39238d9f97882259","first_seen":"2026-07-15T07:58:47.80438Z","last_seen":"2026-09-08T10:06:23.250983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-relax-theme-dark-67e310fe45fc0229712172.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.312Z","timestamp":1788861948312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-relax-theme-dark-67e310fe45fc0229712172.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"d425a7178fc61da5abcb26bb4c2eedd3\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:28 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000ee8bfe051777c344-006a9fdceb-2e3a132b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUbtGdfoSnsA4xHfNzknOz1zsI5p5bzD%2F0HTNyfPZt%2F7lhSo4Lwpgl%2BFDLSrt3dY2oqXx2kmgB3xKLz28ulAeNRCmGeekUzwog2F0WKw1qT68FvfsJeesunhI45XXMHUG1aB9nzeLf4%3D\"}]}\r\ncf-ray: a37d2308f824712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8187,"size_decoded":3647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d425a7178fc61da5abcb26bb4c2eedd3","sha1":"8a6dec3e4892106703559b75d23fce369c2e9e4d","sha256":"b72762be4aeee4be3959addded3079f025b2c0d148de576c999784b74a9f1e2a","sha512":"338ebac3ce0e0e9a43f7ba491859884ffea2b54d5f5fb0374eac00956adddd22df9ffa341d24fcb6ac1816f9f0425ff11845a673f35ee531ca467a3f91f43104","ssdeep":"192:U61xXFOnm5tRCES+dClHyIG7Dcll3VSiZkBzm:UK5MaCjs3cll3VpZ0zm","tlshash":"00f10f95e7f8b390ae6a7ff8aa0bf4b1b61b34f96bb7e815814319556c800dd4c1dc80","first_seen":"2025-11-10T15:09:50.339238Z","last_seen":"2026-09-08T10:06:23.255056Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/football-studio-dice-6855093849cde899093706.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.792Z","timestamp":1788861948792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/football-studio-dice-6855093849cde899093706.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:09:44 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8f151c655d366199e774643a0a5fa92b\"\r\nx-amz-request-id: tx00000e24a3f8a67fdb623-006a9fdceb-2e36326e-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qp5ouJ1eMb9gLGpg6fDGJyQ98LRwJWYPlwmgkVT3Qd0ytXR%2F38mkQqL70lEORQ%2BrER1oUFLknn9ca0rXHDYFKyVENl2g811f8NYr2hcH7rVTNttZIbApB6wTNfxl%2BDZgJDz0pM8A3MY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf899712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15588,"size_decoded":16554,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f151c655d366199e774643a0a5fa92b","sha1":"dbdbaf20aa2d0decf1d3fc0518638e36ec58d8ee","sha256":"e1faafab676ae06b2f1e0858e94e52bc42bf6b62d6e0abd6989828224c5f9e49","sha512":"0569fc7dc689576c0ea8015fe2fde99766151921bf499ea28284ac895a433f14278451811e4121a31d0fd4236a1d954c9143acdbe542522843fca6129fb56ac9","ssdeep":"384:QWIq8pWTozWIBHJKhP8O/79Ap8TUC5l3lryUWqbyYhsjd8VKPp9P:QWuWsWIBQjyp8TlTmcbLsjd8WP","tlshash":"7e62d0aaa03a93384fa5dcb510b242e2d9c871f99107d0c57108fde82c49f94dc9e59f","first_seen":"2025-12-08T06:56:23.265768Z","last_seen":"2026-09-08T10:06:23.255536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/first-person-blackjack-685961acc2525049149028_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.818Z","timestamp":1788861948818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/first-person-blackjack-685961acc2525049149028_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:15 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bf10efa846af06ba22dfbff848227142\"\r\nx-amz-request-id: tx00000682264d7b38d1fd9-006a9fdceb-2e3a17cc-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pisWrVyEu7RuEF0Z%2Fb5IKIhSqiPBvLGrNOHfgoJgFHqyywRdgCO6sVe%2FYrt2LMHKm%2BIMTeuLoSuLQ0KnhJyNnbaVcoYthHbOBp7IU%2Bo8V0T%2FEQB27Mp%2F1X1oLV0TjA23xMPG3opUG6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18ab712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14712,"size_decoded":15684,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bf10efa846af06ba22dfbff848227142","sha1":"84b79b45078bbcc3a8e5ed70de6c1c0206e72ad9","sha256":"55a224ac20042835c84618b050c25d31b4173b9bad42f30998681f28d49ae1a3","sha512":"c14ca167b17558ae5dc7df2df543a2b3a281a807811be54aed94e271182f9552a0939d358bfba2350fd83dcae98048cb5acae5b4b9d9c7fd6647fe2c0041f6ae","ssdeep":"384:1zzMyNQr/4zXnBDfZctZKByJo+eQtG9/JuMj:1ER74XBDaoyJIRuC","tlshash":"8e62c051cd47b4166f24106a905fe948f0678bbf207beb02bb4d7ea05d3922ee1807e1","first_seen":"2026-08-08T23:54:59.10774Z","last_seen":"2026-09-08T10:06:23.255996Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/dragon-tiger-evolution-vip-685969b7d2e97898329600_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.825Z","timestamp":1788861948825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/dragon-tiger-evolution-vip-685969b7d2e97898329600_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ce933898a0087258ddf197d24a8aeb5\"\r\nx-amz-request-id: tx000002c17f55601789d62-006a9fdceb-2e38c94a-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLcwBPh2ztAqohVzRmQs4LwdhtrEIXwMM3qy4Jp39tvAqCtCow%2BcWLhIZRdmmHHaRyTq9sAAkLtzZaBmQL3BPXYqMRnnQIJ1ULBDdLbarWJfwlC2KfAYBvSp5LYgKrPibhYuvz5tyaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c28b0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30866,"size_decoded":31828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ce933898a0087258ddf197d24a8aeb5","sha1":"2736d3f4d618fb9eab8b12e1bfe67e517ab7d009","sha256":"befe127930b875e18db308a1592dad975bc67f73a8f172ecf06e6e53000967e1","sha512":"dd2e9d1ed4620d158a1137212458ae7f9a847a60614e1206e1be256764be293ef749573e4920455e40f36f7709354b70f13b45ef139636efdb7dc2df1fb944c6","ssdeep":"768:ucH0sC5BGebmglgwMHOBa3Klo1KeTW9YLHj/AafoeZLrnoI6GGSRBwdFHn:WpDngwKVkE/LHjzwynrYe2f","tlshash":"f5d2e1170d6d6ca23c463e46c514ef9cae247ac1fb7d9753aea70da15f331608906dc2","first_seen":"2025-11-10T15:09:50.410016Z","last_seen":"2026-09-08T10:06:23.256462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rainbet-games-1-69cbaa1558e52761814004_1365x768.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.177Z","timestamp":1788861948177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rainbet-games-1-69cbaa1558e52761814004_1365x768.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 31 Mar 2026 11:03:52 GMT\r\nx-rgw-object-type: Normal\r\netag: \"06ad443b7cace2961e5c4a96732cd151\"\r\nx-amz-request-id: tx00000275315d0e22eab66-006a9fdceb-2e363327-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnmlmhjkVFI8536pWC6iKkpAMh%2FKE0J%2FO7ybejDvhKrHK9ug0TkD%2FjifGs%2B98lz6N6zHzL8BzazKZ9ERTDVmZQuDUz6yWVyq9eRw6zLT19X4vfOLLXeV9xXOoes5IyHCUyAuI6jlDO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23081fc2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156158,"size_decoded":157129,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1365x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ad443b7cace2961e5c4a96732cd151","sha1":"dfafb21aa0b4c6e0d347f37d15b83eee458e3d0e","sha256":"2662fd24c2b9b71a5ea8156b5aac248971fb1eb6a0919a27378cbc82c2cba903","sha512":"105af78c779cd89da51f6af90a0473a4805c2cfd52cb11137c729c5f0c76a22c60f74b672e4f94b3dd86f060488f65bdc4f271727d41470d65d70b4f76cc1073","ssdeep":"3072:HH0ulHi3C7YaD2xYoVC6WbTqmmb0eZyKyNmmghJ4ntUIg89zYQvWsbsKgrOG:HHJaC09xzWSmmbcQL2tUr8QOG","tlshash":"7ee322fec95a1077534e8a6594127aff710252031e3ff3b43978c3b2807662f9e99168","first_seen":"2026-09-08T10:01:53.393907Z","last_seen":"2026-09-08T10:06:23.256952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/hot-hot-fruit-6854ff42eb0e6621034896.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.233Z","timestamp":1788861948233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/hot-hot-fruit-6854ff42eb0e6621034896.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:27:15 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f679561e2757980b410e07254340c67e\"\r\nx-amz-request-id: tx0000014fc3852a1bad685-006a9fdceb-2e369a14-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhWiq3x1SU2ngNdhtBQQL0gC%2FbpuP53w1kSd91e%2BXS9x8%2Br6eki1fVhMZpVQDQ6mAj42V%2FIKt8IfRrHD91vkdcQqtO%2BnbQ776jiq%2FrWJqOk5cARF1ZwkGhLG2lDIR3%2BRYZD36yJN0s0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23087ff3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30976,"size_decoded":31950,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f679561e2757980b410e07254340c67e","sha1":"b60e424b95335ed297086c300481562c8e002cfa","sha256":"e2849659a6148978bb1f8b85e82d429fe526988e4625453a67e245785760d6b5","sha512":"47d52efc1a5a2ce8371bbb80397b86728bdb95c9f03b6d125ab0020d3dddfd1f85ab7a1dda5293ceb05c09f199196c081784bcacf2ff95c5e30102b7da716bc3","ssdeep":"768:9ndo/dY6fT+sR/ASLZTj+HI1TYMdOEt6E61RKHf:9dolLb+suSLNAI18+OE8EYRi","tlshash":"e3d2e1edca04622859157558d0fdc059af1162bf5f4d7b9163aa090de21930cff8e1ba","first_seen":"2026-07-15T07:58:47.516198Z","last_seen":"2026-09-08T10:06:23.257605Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fortune-dragon-6854fe4874caf157295689.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.289Z","timestamp":1788861948289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fortune-dragon-6854fe4874caf157295689.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:23:04 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9973bbe3f1a9c78c2dfea2bc79fada64\"\r\nx-amz-request-id: tx00000d186eb349b5f4215-006a9fdceb-2e3b48d1-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azlXib9bgj2JhbzdmPRcb4YGMh3Bxv38YLU4%2BoS9%2FGlLKH49ai4mOXHt7FFPIbHW5yaEJG9OQUZ1Nw%2BETL%2B3oCg%2BE%2Fx9jyyxCgG3snCEy%2FIdKYAIdVB17GkHmQXmn%2BGB8sw5oYGXcMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c815712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13736,"size_decoded":14712,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9973bbe3f1a9c78c2dfea2bc79fada64","sha1":"ad576cbcf51590dfcc31c59a1a1671173649566b","sha256":"86dd28a913e056fe0c8644e2fbb8b161397191b48fd35e699ada22db7563d36e","sha512":"df9211aaeafd89544351f2f77507000c51dca9befb0e81c214a8894e58fd2103596f5d9843c90005d787a96e1b9903b08ac7ac2ee3f1399a19b798b0f172bf01","ssdeep":"384:4S8+cFEc20DEb7hpn22D2Yo8/arweQkk21rQIL7qsjZbOnQ6t:4S8FEc2kEZpn92YocFedk210sVinQ6t","tlshash":"6b52d0fa75b14de9586cc2192d6132ae8cf438b0c597b7b9d753025f41aa251fe0f306","first_seen":"2026-07-15T07:58:47.7279Z","last_seen":"2026-09-08T10:06:23.258146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/buffalo-mania-megaways-685916b7b11aa243907657-685d5ce4d1988651587815.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.308Z","timestamp":1788861948308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/buffalo-mania-megaways-685916b7b11aa243907657-685d5ce4d1988651587815.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:44:52 GMT\r\nx-rgw-object-type: Normal\r\netag: \"89d848557f114f38998c3b553c4be496\"\r\nx-amz-request-id: tx0000035c673b998961a93-006a9fdceb-2e41f6e7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiE2Fu7Lc27qWGV62%2BntQxOz1aSoHwdkBOcSgttmVUwKlaSN14ZTleShsSg%2BoKBWTjeQ%2BPW4mX09wFBjrkhcJ3VW20Jif0lhovkg8GbwjYFDfkMDrr6w5g5PwVYs6EnAntx9Ip0y%2BB4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308e821712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12610\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12610,"size_decoded":13578,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89d848557f114f38998c3b553c4be496","sha1":"f34c8bf600276c4d347e4a9fcc60553903bb39c0","sha256":"956744dcc563c1ae7176a08913971a57819e7c7a15e4ca68b595e4d41b88c6fa","sha512":"626b42809ff74c8e122a729579d7569ef263f39ff7422d79c279cafa48acbd1830fe749b33fce89b3c191626e6eb89aacd83476c93dcbae72701ee2a477a3075","ssdeep":"192:CahJId4BTrZzwpNV0A66/yciNhFmefTXVczS6kpnBGalEp4zT04rI8kf:CkJnxwpD0X68hFZrV0S6kpnBfEv1","tlshash":"7c42c07553652038d03cbe7a3a5d0958ba72086b38fe23b784fa2bfd9d51a00bd13870","first_seen":"2025-11-10T15:09:50.331362Z","last_seen":"2026-09-08T10:06:23.2586Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/fan-tan-6855092287354123035349.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.794Z","timestamp":1788861948794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/fan-tan-6855092287354123035349.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:09:22 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ef08bf2367d7f1bb6f53cecf6d80271\"\r\nx-amz-request-id: tx0000018af4a36d5a5f3de-006a9fdceb-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfLYwCU1WjC0KhjkuAVkNhcK2z0rjgxkNeLgvuyMRMq66takFkTSOd3Ovth%2FFjnJEtejsKFf6JDZCO9lXxTqCsTOJmFZ6lpfCx6BklJezXpiEuWd94zMFS%2B1%2FMXkCzx%2F2oxt6TFoi98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bf89b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9248,"size_decoded":10215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ef08bf2367d7f1bb6f53cecf6d80271","sha1":"eac542f4d8a75f0fc43e3ef1ed41bec362890bff","sha256":"3fe06705913e90f9b8a3ca2ad2dbb31e06eb2f1d5f6b2e7fb083015ade33965c","sha512":"3aad155caa11185b30cfde07c0a3e94ee41daae975d8971c5035bc5b950199b7999598630f4db11d300989d413af7fb006e07720622f347f0094802482473779","ssdeep":"192:3c9OZX7UAF2GKpI7GuJhIlv15HanWLByvOJIlRL+YpNHs07R9KgcPD2b/Ky:3gOZX7NECamhIl/mmByv/7s0WgcPCuy","tlshash":"0112af3e035b5682636534997187e127d3e78deab52f23a5e3f1ae032e428331928173","first_seen":"2026-09-08T10:01:53.410677Z","last_seen":"2026-09-08T10:06:23.259143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/coin-miner-2-685910cb4dc45854172758-685d551322a06671532334.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.857Z","timestamp":1788861948857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/coin-miner-2-685910cb4dc45854172758-685d551322a06671532334.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:11:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a56d837dc1c3f2696e2bbfb49fe5516c\"\r\nx-amz-request-id: tx00000259332cdaf8c81bd-006a9fdceb-2e362ebd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZV8%2FELQbzqC4g%2BHXyyuFe7gubLO8Wemuy2bdXTRMHq6ULvRGtvIYo%2FNTBBtvJqoeVHirrspNqL7rLQlO1N4p6TZ41%2FAcV4RMmnHv%2FXfAy81i4rR%2FejaEitdY7dFi4IQrzYhGks7vH%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58be712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19210,"size_decoded":20184,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a56d837dc1c3f2696e2bbfb49fe5516c","sha1":"bc044e6edfa72304425f9b5f3ebfd1b50e423d7e","sha256":"44fb0a6552d18a9b5d1e7adb73f36f0368ead4699c842fc1b811d338685ba5b5","sha512":"38d48c9b84217604df0656de746b65f5f1581e4d865b37f3a99ada734593db094263162cc53d241813dd7ca07457b4b60312c2b605ef51a674c761d805773d1a","ssdeep":"384:psJ3ZCnnn0rzTYYA7Xo6LDQSsX28H/IZd991x7gil+D:OJ4ncTYYoY6fQ08fs9Ail+D","tlshash":"9982e08dbb995b01c00ad23b95f2a83953f3831a3cebaf4b5021c877592e1d402cc951","first_seen":"2026-09-08T10:01:53.522679Z","last_seen":"2026-09-08T10:06:23.25984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/big-bass-bonanza-megaways-67fd29761cd1d555018261.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.200Z","timestamp":1788861948200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/big-bass-bonanza-megaways-67fd29761cd1d555018261.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Apr 2025 15:27:50 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7ee1a3c1d5522feb93557016fd90f11d\"\r\nx-amz-request-id: tx00000e4b57378f68e08b5-006a9fdceb-2e369988-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wb295lsiy9Gqjt%2FCy6eEVKsqJ0EduRY7b1em3zbjPJR34eY5tHEJTtnHZ%2BUa5673clNJcHbNrrnclNd8t22b%2FQ0pjoYof1YsEHBCetrOvPOZBgfgdgjFpKufS%2BgDNGT3l0xdamkrFyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23084fd9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6912,"size_decoded":7879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ee1a3c1d5522feb93557016fd90f11d","sha1":"e8355568375312db45c6d043ff4762a200d07a39","sha256":"0898e162d9d53719e5fcbe42905673c47c1e72dde1951b0fe24bd568f8f39936","sha512":"f866e3ca0b6d4f47140bd425fd5a15abc745df13613b515eac09e4db1c217e4031ab1c4e12be5a63f978265e0c25f03ccf14c812d747ee63c9f0bf05ac71fe37","ssdeep":"192:bgU834+NitA9U7CWSvMhg97vp7L1HMXjj5f:b8yYwCzkg9Nf1Hmt","tlshash":"48e18d3730cf9781aa836911351c1ecf54066637919bfc8f7885c3a5ea848372a8d8b6","first_seen":"2026-07-15T07:58:47.824531Z","last_seen":"2026-09-08T10:06:23.260365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/group-14385-67ecf01a7861a067309652-67ef8699a8a17633425047.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.232Z","timestamp":1788861948232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/group-14385-67ecf01a7861a067309652-67ef8699a8a17633425047.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"597826cd3da12799a9bd90eeec5d0941\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:48:29 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000006122eafcf258ce5d-006a9fdceb-2e433674-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XAm1znnJY%2BYoYN7%2BNt6FDvH2MaU%2BbJ0XHVmoLOm7c%2FFyKCZu%2FFY2gp%2FhHvzG0n%2Fc5r91D8lIG8%2FAyvR9JZBxW9%2BMGcMnBChIJZ%2FUc7VWSY4bIF2l1%2BKsvi8Ha3oBvSoMubKnzEvo4A%3D\"}]}\r\ncf-ray: a37d23087ff2712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26018,"size_decoded":7874,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"597826cd3da12799a9bd90eeec5d0941","sha1":"4f31231e1ab50a1cc85d90600b290cbf90729a58","sha256":"e533552e2fdac1c7da979256233f6339849706abc317ba2cdbe28af0efc90fc9","sha512":"352dc589b583c85076d930b4915544edbc0c3a40809881e1201b5d7423cb2cb625007a9601cde6a6abdfe04c7029e787fd7d551220b64d3e2ef8ac83ef5d4b56","ssdeep":"384:npti24ifD4R3PrnA1DLdCzW36TBO//3QldPGkBg/:naicRiwW3QU3oGkBG","tlshash":"22c23ff4667881d00a83fe7dde3bb99974351cfe3e94659403a0a9a878653f9cc88cd1","first_seen":"2025-11-10T15:09:50.400857Z","last_seen":"2026-09-08T10:06:23.260812Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/limbo-cat-6859125608b25332924495-685d56e53b8a7322799757.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.285Z","timestamp":1788861948285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/limbo-cat-6859125608b25332924495-685d56e53b8a7322799757.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:19:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"0b52722d96c3a154410f41b674812c7d\"\r\nx-amz-request-id: tx000003396126e34d097a7-006a9fdceb-2e378517-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfnqdnlrF%2BtAwgBDBfBlaCCQ7WNm2uVL%2BdoUvvP8O8L9xBiD3iUY6DJ8%2BKRJZGpgWD5ywYvVZP6Ls8LHw7%2BHcBfP%2FjZpwbHAJoSNryoBKraqAbgk%2F0QO7dS2mTH6ZLvdC0us4oxKbU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c811712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7952,"size_decoded":8923,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b52722d96c3a154410f41b674812c7d","sha1":"d9945645398accc09f682eac96f5087681475d95","sha256":"3b19d72fd3bef64f0851d5cf5ed1b71203f1cf7e1897ccd7a96e944fc2a2cc02","sha512":"8cd9c34f832ef4b1fb6a1cafd187042afcc168b2a7bc4f3ad9c8df6b2f9301bf9117dfe98bfacfbda8969baf1c1664f04dc9d5628e1aa575c6e975a19b8b3907","ssdeep":"192:fZtjBW1LRSXUPJWPx9fyN6YPAlxU5mR8EU76q3pps/IAcO9:BtjBW1dIUPMp8NbPAlimR+3k/R9","tlshash":"f0f19ea82f0b35ede923363bc8ba72c45933c1568a68832b180411468ed0da15e687ac","first_seen":"2026-07-15T07:58:47.778447Z","last_seen":"2026-09-08T10:06:23.261283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/assets/images/bg-apps-lhr4dFG.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.322Z","timestamp":1788861948322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /assets/images/bg-apps-lhr4dFG.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Sep 2026 10:27:32 GMT\r\netag: \"6a994b94-4b62\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQNEDNPj7EoM5wxuPcqtuEomyCfHHcQeCtFNvZBKQQJt4VhxnMOauVN0Jk4sHvQJvXSPEpA%2FD%2FFz38%2FMGlGHP0HpDzDrbZ3krwxFMnwFz60ta%2B8bN4cyWTXV9%2BGoj1YbWD%2BM4CnZdWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2309082d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19298\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19298,"size_decoded":20578,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f535e0aef87c7c02d1cd1c45a60bbc3","sha1":"5444f451bd0a6e6704bb4a752649cf74ed9f698b","sha256":"29511fb725e9472096f6fc73f670a2ee832844d6ec218eb48d6c94f99d3741b9","sha512":"508bca98607ee68ce17e7db67d8ede6bb3f82d5d7635aabd62f4d112f9305c2e0a84af4dc727d5f73b941bac414902dccb7e22fb0d526492d0159a5b97a7fe6f","ssdeep":"384:DjzQUMFkY8bTkYyYEFYljOSmLPwx4N3Ateb9Nalt4MV+MB8xDKSmotTHq:X0UMTrqOvrPlDalt4MVLYKSmwHq","tlshash":"4682d0d11aaf838994ae183bf35b518821d775476a1cbec6c798b960783d0cafd04531","first_seen":"2025-11-10T15:09:50.402689Z","last_seen":"2026-09-08T10:06:23.261831Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/oasis-poker-68596ad8004db670431224_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.845Z","timestamp":1788861948845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/oasis-poker-68596ad8004db670431224_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:42:04 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ce94b7d8347297e7bdf798e80d37768a\"\r\nx-amz-request-id: tx000006ab17f12ab56e887-006a9fdceb-2e38c8cd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lv9yyill7KDW0ehCV%2BQaVU92WrkVPSyiYGtRo2dSTgaOil146gWNKre7OottVniZvP4xSoQ1iR7vxmW1ojzR9O8mTDohf%2Fa%2BBYcF2DWXUJ4PvxwMSo89XFPHLPMynQpOUt%2FCyT0hf2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c48b5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8468,"size_decoded":9435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ce94b7d8347297e7bdf798e80d37768a","sha1":"eb8d808953aa8fcc829cdca053f6f65aaa432c17","sha256":"4a421574546a17fdffcdd6733a78ec3057400e3ccd8a28eab876890d1fb0b079","sha512":"eaf7e98107a27c2f94e1534428f9d14320e1764934b4e57a9bfe65f5aa92d760a2a0c171e3538f845e08fa223f3a5a769b5cbb8731215f901b070b19e2ae7d94","ssdeep":"192:40kgABA9H1bVUFNKBZTmIK6NfvuKW+NFsTmbwoI:40kiVbVU4Gh6dvrXI","tlshash":"0c028e9d8b30752f93fdf98863078ece9e1d2e2b254a5fd963f6111b4024187d31686a","first_seen":"2026-07-15T07:58:47.801084Z","last_seen":"2026-09-08T10:06:23.262374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/disco-777-68590856b8406440476798-685d52428a68a375814044.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.858Z","timestamp":1788861948858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/disco-777-68590856b8406440476798-685d52428a68a375814044.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 13:59:30 GMT\r\nx-rgw-object-type: Normal\r\netag: \"015ea845fe2253d23e7e91b3770a0d44\"\r\nx-amz-request-id: tx0000079d85973ee51fcc1-006a9fdceb-2e41f6e7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyNQIf3metf8a7mYePXS4BKc1vEA7i42jyuGmZRkpCunYrsGHyOiKhExtyTdxa1hCevuCCsLUrsNfMOHObwCsX%2BF3tZhQIHHyCSyOlRLQlS1cuRFI09w%2B7CRn4thx031DF0AZm9vBwA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58bf712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7910,"size_decoded":8873,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"015ea845fe2253d23e7e91b3770a0d44","sha1":"e2e57a7d47dc4822f493f8da72700c391f418293","sha256":"0a66159dc699ae6be7383417b7b7c1cc238fba5edc8a65d5bff6a78e3b339941","sha512":"a5b89f404f3065ea477860a168ffbcbac545c715753d61dfa8b1fc0bfc09d67123c1d1f1077d71b6f1d2e4776f364fc6be1134e2dc65d9370107155971bedac8","ssdeep":"192:AjLBX9I1a8fmDWeyAoMMCN7vE8iNi6SCM:YBX9IIoW3MCp8ZNiEM","tlshash":"c5f1bf080b7ae131ea5d323b89e829917023d417d361e3eb18108dc759463d2d7c78b0","first_seen":"2026-09-08T10:01:53.412117Z","last_seen":"2026-09-08T10:06:23.263129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/f777-fighter-685909c6a63ce104103100-685d53a1da0c9256882435.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.284Z","timestamp":1788861948284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/f777-fighter-685909c6a63ce104103100-685d53a1da0c9256882435.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:05:21 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5339042911234f18269dd5c94921e003\"\r\nx-amz-request-id: tx00000223ea5a074dd66ab-006a9fdceb-2e37667f-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfXDxeWXez3z4AT%2F0aZ4apL9hzzZiJ%2FIOdx8ckRinGqRRMGqrgoQ7GNU3IdE5F68ZcyQyH%2FrhSOD8k1vqwv1Kz17cJN46LCJVt6O%2Bo5evom5YpdZyfKD9rohjCPgZ1sPi1qrTQpdMz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c810712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8478,"size_decoded":9445,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5339042911234f18269dd5c94921e003","sha1":"cd1865cb7cefbb18ad77d1dafc26f0db18c828e2","sha256":"4a11d28ceb2c8025d64d78dedee4469d185454b0d57624da036f5dc9034d2ec8","sha512":"3c93b930f53504f3e77352025d478aeee8e2db3ded85b9e276befe498cef3e072263547d5e1fff44cc07169426e61263d730f0959c782ee3541f87799de96c26","ssdeep":"192:waiFEAam/2e08I4i3DCMMCrvDWy7a2oAzE0xc1DHWhCukDyH:waium/2Nt9zDvaazzaVWvkDyH","tlshash":"b402af517fd26d20d0251abf76f5bec490763688e7194be6e36f01f464e2e90c873920","first_seen":"2026-07-15T07:58:47.764028Z","last_seen":"2026-09-08T10:06:23.263949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/miami-jackpots-68555ddb0d23c229677355.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.320Z","timestamp":1788861948320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/miami-jackpots-68555ddb0d23c229677355.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 13:10:51 GMT\r\nx-rgw-object-type: Normal\r\netag: \"080ce2b9fcab5c4f7ebf9ae08694c063\"\r\nx-amz-request-id: tx00000a441a6919339503b-006a9fdceb-2e37889b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7mOu%2BgDkEO0gqNmJL18%2BUT5uDpzDh5e9sEvqCh%2FBD9LI80ArR4IhtaIg1gE2R%2Fa7kPSmkrZTcGWklpyH%2FPglkG3dZPh5pUNAPc5NClTb5zuL%2BwaYeUL9OkDN%2BgnVBC68we%2FNTSSP1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2309082b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51308,"size_decoded":52284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 472x354, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"080ce2b9fcab5c4f7ebf9ae08694c063","sha1":"00249a2ad2c02d3d1b0ea79f0a389c6ba70c0372","sha256":"fd95d8e131b657c8e008bd47095356b605e07a4d75b7555b7d999d80b074f3b4","sha512":"0df05b2de3c8542facac655de9d68a3483bf9d9b6e2a11e2461cea7ba07f45bc5d38741f9ac705c3e9e521a6e3784900c9df2e327fd1efb064f239e8ce950634","ssdeep":"1536:NWzo8oFCLIxMBpBGBPnpG1bxGERXjRv9sI:NELoMBzGBPpG1F5vyI","tlshash":"5633f2b9835317acd35a4603aca4430e390e65cd48fcf8068c699dd562e48f9fb7ab47","first_seen":"2026-07-15T07:58:47.821419Z","last_seen":"2026-09-08T10:06:23.264404Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/marble-knockout-68596ab7bfb19144574107_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.843Z","timestamp":1788861948843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/marble-knockout-68596ab7bfb19144574107_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:42:02 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f3d5c302f7f325d032f755cb0a03cfe1\"\r\nx-amz-request-id: tx00000c978de21969eb954-006a9fdceb-2e3a17e0-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ikv1DhVhjH7a%2Bhbk4osN8TuCPCWu66SqJdJ4v40htbH76IL7SdTt9D%2B0FCi2ZIDDnjbDVsZ3UPF1NP7WYry4iYOc0LtA5PEUaJ59a9T18tq52ivhdKstnPyaLe5KHeIJ7gxFrQclmbE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c48b4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22886,"size_decoded":23850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3d5c302f7f325d032f755cb0a03cfe1","sha1":"f93d0e6d3d7fba84ba17495999dfb65dc6c9881e","sha256":"3eb6224e885c9362665e798081ad0074a0befc16a9b647b68e411a6f1d010a7b","sha512":"0d2d8af5aebe6a02974d748adb4ba59d088239da783754df71fc1232eb24743cd297c4db65ebffa634e2b70c6b1a59f2b021c5b1b30bdb2da2617c37c167e68b","ssdeep":"384:2XkMbltOj10y0oyoEaMS5Kl3/YCxdI+21oFIiyyUWan2JOMeyqMRDT6dGxs6vkZF:skmM10y0NoEaMFFxdIiFIi9I24Meyq0k","tlshash":"eca2d10f52526f5ea459c0a086bdec3b5a3e6996eab51113cf5dd72f230a0347d084b6","first_seen":"2026-07-15T07:58:47.735762Z","last_seen":"2026-09-08T10:06:23.264935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.242Z","timestamp":1788861948242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 10 Sep 2026 10:05:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fer591DXQB5bZXPcWozbNQa3h7EWnBLlcG0gzGAvDe2fZ06g0mY%2BrFNGAVwCQMKNDJry9WB7wyDC45xOXaLwtmp8xAppAB3IWHrM77YLyhj7IdLudRvRH6nvmeY%2B6Fsztd%2Bn%2BvJSiTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\nserver: cloudflare\r\ncf-ray: a37d23088ff8712a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T19:31:44.460668Z","times_seen":432054,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rise-of-olympus-100-685500920b158582024010.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.295Z","timestamp":1788861948295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rise-of-olympus-100-685500920b158582024010.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:32:50 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c1fc4b4e2c64863cdf012d5632cf7252\"\r\nx-amz-request-id: tx00000f01b1319c29d9bf0-006a9fdceb-2e363327-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BDjdBOM44uitpWCl9sw5DuyrSLpjEhd%2BMLdHxd0xFrZRV%2Feg2zWPNwhXFKECTWNz8zwMezHyecuBQT%2Fg1pDGYkTEkm0COfA5lxpTwIsVmtpkeoKxMszjr63URJvvm60boWTfaQR2ms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d81a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33120,"size_decoded":34088,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1fc4b4e2c64863cdf012d5632cf7252","sha1":"ea3bf93138cd2e57a065592d6d6ef831ae2c2854","sha256":"6c9385c12cf3afbe0f7fd17419fdcd5aad93cf22dc2fe7061648fa2d356d2c56","sha512":"95f857eb170f11cf3bc219a1aaae8af423c2ba1fb8852de84dab54d542f9bc530ac4d23a09ebc3f68571dd384d7f0217146a1dd363a5fcd262afb05038247061","ssdeep":"768:plJfeKIHbvhWpi4xOk5ODah1CrANJtK+/eoXvzvNQqH:/Jf7I7pWlYk5dhMr2jbvSK","tlshash":"0ee2f16b19461686274d8b174ed8b304a8c80f5672a687f91acff416e76fcf8032c573","first_seen":"2026-07-15T07:58:47.788632Z","last_seen":"2026-09-08T10:06:23.265419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chivo/v21/va9I4kzIxd1KFrBmQeNHkQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.483Z","timestamp":1788861948483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/chivo/v21/va9I4kzIxd1KFrBmQeNHkQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino-au.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 11:30:47 GMT\r\nexpires: Mon, 06 Sep 2027 11:30:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167701\r\nlast-modified: Tue, 09 Sep 2025 18:57:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24768,"size_decoded":25581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24768, version 1.0","md5":"34df2f5f937c8bfdac34a0804fd0f731","sha1":"07f022618c241c38a47d69bbdd925503daf942fd","sha256":"737fd7c57fc4dd52cf5738f1c0a6726a54c5860dfbc0560bce72299b8dda32e5","sha512":"01e1017032e4b6220c68fc5f44de2984cad07fde7358fb732a415dbbc6003a7532f5dc51ccb5af06c3d595e865b78a9b7f64e0c027f29434f08dd842524a729f","ssdeep":"384:qX8+/N4dn5vexZZPO97CNb7+LeGqqVwpMKHX1Esv9l8diF13Vk7P3VN:48+g5veDZPO9OND1PaKHXrydw1367P3T","tlshash":"4eb2f17a01f91620c97a80fb4f05c5daae5493374f349a9e6cc34b979d87f844af8287","first_seen":"2025-09-27T00:55:06.63958Z","last_seen":"2026-09-08T10:06:23.265901Z","times_seen":148,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":22,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/favicon-rainbet-696e73a68e392311559144.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.673Z","timestamp":1788861948673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/favicon-rainbet-696e73a68e392311559144.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:46 GMT\r\nx-rgw-object-type: Normal\r\netag: \"16a2a18afdd98e09cf6c56d272de4318\"\r\nx-amz-request-id: tx000006000ba681f9ac4c7-006a9fdceb-2e3788d7-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX5%2Ftv5eE0f0Vl8AoQZv7gvsCv7tw2mFipinTxVeaqLyHMdl6Bt8VBYIXS3shag8kjrVlu5bXVVb1joUa8bR8amjHEDik4GaArjJKd3MxJzA2p9vBGxEi72YKBomKYUo363iPIIXrGU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230b3888712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11086,"size_decoded":12051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16a2a18afdd98e09cf6c56d272de4318","sha1":"044f3b36acc71b547934b998331319605bbd1e04","sha256":"604694e170f85e28737886427cbae4d5b3d4a8eebdc8daedd1c2ce60b5d07717","sha512":"0ba7fc83fff5797e7ab68263cf67f718c14ecf8e08db0037220db58c6acb8b67a78b74459f3f7b28739887d40055c23c340953d901b4c59bc620f32f98f0feef","ssdeep":"192:FDHd8AFZQJ00ebN/jlqfRiTSJImYhbnC/HuwNqKHZYRS1+hvb25FV/tVoJfTwOL7:v8AoJdepjlqfRiLxRnC/HxUKKRSA1q56","tlshash":"c232c038a28d758630ce19509376cd30904ca84bd79d3cdb862c69af4c4866eba7bd16","first_seen":"2026-07-15T07:58:47.573374Z","last_seen":"2026-09-08T10:06:23.266342Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/high-low-dice-evolution-vip-68596a4e6f5ae752928289_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.814Z","timestamp":1788861948814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/high-low-dice-evolution-vip-68596a4e6f5ae752928289_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:56 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d89843a9b192c4c78d2e2a631bfc6127\"\r\nx-amz-request-id: tx000008426567e5159cd83-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHPcYuz1rRaY0t2XtI59qiBAp0arfn2GewVvxWtaNuOXRStUVnTInRMdRp1uJA4a6eIqa9p573zE%2FMchZSxqiZ%2FBWSwEfxN36K4IhfBhZn88OvZtCjphfNo8ByNF9lt3jB8sbOAbXFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18a7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17882,"size_decoded":18846,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d89843a9b192c4c78d2e2a631bfc6127","sha1":"cc5508c3bcb0d192939b41ab18a3ed59fcf4b4e7","sha256":"f1eb705b69308bc4ccb39e42d7aead9265dc26784afef5cf72af3acd4d084878","sha512":"7b2f31890e7d62a622ab98900ab9211ac48e35a74ac14c65ae70e01e74f3313adf7112bcaf19fce6fc9ead64e27e1af17381e4eedf5d7b5671b5a8a2263b3769","ssdeep":"384:+0E/t16fjT49imcvWk3wZG8jn6to5onUfR4BhP2Pg9uywYr+HHCq4cT:+0St16rkkpG36t2onLBh+HywpCz+","tlshash":"7982d04ef0a31d6014a29474e78982bf6ca39cd43cc09027557da7e508caa2dfca5dee","first_seen":"2026-08-08T23:54:59.229808Z","last_seen":"2026-09-08T10:06:23.266795Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/american-blackjack-68595f60da829249266029-685a495344ad7679121437_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.833Z","timestamp":1788861948833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/american-blackjack-68595f60da829249266029-685a495344ad7679121437_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:42:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dfd1fbbb897c3ceed3a7f8c0e6e95c2b\"\r\nx-amz-request-id: tx0000062ce0b487f570a0c-006a9fdceb-2e363327-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjyuiN%2BlCVsRVGKAFyNUEi0SnKTEboQHr297Fr6hN5pujn04Qln%2FVg6hyXGElrO2jLEqo%2BqWsIOXAbuQx4WQUP40LDu7UV0VM39ZNtq7F9gQ0EMKQ2YMGFflbbrkJGE5DlWkBVvG4dg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c38b1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20192,"size_decoded":21158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dfd1fbbb897c3ceed3a7f8c0e6e95c2b","sha1":"88f3dec31807b9bfebebd8a5c3fd852d5e680c03","sha256":"ab647e6c94ee5a83b1a038616bbea1dd1f895ba5dbf177c37e4731b517d82220","sha512":"db7fbec7b1c16314fa13d9a5a4feed485e5d2ab56447612b8c1a3f3dde39581f5bf257941dc0a3c1c9bed0e475c9ee734c002c0abe744f88160314be1fb102e5","ssdeep":"384:sc/J+Q/VQ2xBC3qX52rU+s4gry4WhvfHogjkR/teAMejRcTOSE/:sc/JOavjry4WdfHM5teYcaSE/","tlshash":"e192d13cad7a3165ac9a4ebad110fd55582ec74debca8341c8df1acad4c46d932cce24","first_seen":"2026-07-15T07:58:47.649142Z","last_seen":"2026-09-08T10:06:23.267275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rainbet-logo-696e739d435b1865325084_457x156.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.859Z","timestamp":1788861948859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rainbet-logo-696e739d435b1865325084_457x156.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 19 Jan 2026 18:10:39 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ca265593ece4163274471e4635ae92b6\"\r\nx-amz-request-id: tx00000d390b610b502bd6a-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXxhM0PY5RZXtR9uEpRWo1NjQg6UBIRBI0HdZUYj8cL8gL2ZsI8RWoib2uluZc3dhjfgEw5Bi7TXHmH2r1lhwXXLnP7OVhwvmNBMcmOlmm1oBgPLQ2sXVzGnlvrUvGwRkaHYo1AiZ04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58c0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7426,"size_decoded":8385,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca265593ece4163274471e4635ae92b6","sha1":"7aeb376433047aa1a3cc6421f22f951eec93460d","sha256":"8b52e4c93edd6b6761639e7217bb66025ce018ce1f2b2f73a9e6931277629eef","sha512":"f75e750b03a3664336096abbf14c869025938d470183665548785440cfc672609f2ea83ada18d256f7021fe267f86ebb9d32eb815e7e248a3be5b758688533b6","ssdeep":"192:RnVUEt182DjZXSKcrwUk5H3ZFaRQDpNnSPuYD:fUIO2D/crwUoXeRgnS7D","tlshash":"bbe1afd721c8d4b2b2495c6df8e50f2ef1c4bce84c8ade772529841189b7c60e36b252","first_seen":"2026-07-15T07:58:47.83243Z","last_seen":"2026-09-08T10:06:23.267732Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/midas-fortune-6854ffe9e3aed279408278.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.290Z","timestamp":1788861948290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/midas-fortune-6854ffe9e3aed279408278.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:30:02 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e9bd31e1f17681c700516fec1905ec0b\"\r\nx-amz-request-id: tx00000f5f2e22161f05099-006a9fdceb-2e3a132b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7v06FApMPy8vlYK73eyc5QxhY49rSX5ifS0nhf23d2nrHNuV7j46We8RNw1nxCh6hRKGMEBCGPZ4u2z%2B15T%2BNy6R14FeXPJlUJEKuaPA9YwMWtVYjite2t001OvGWnG3sOCUpiWfvhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308d816712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21362,"size_decoded":22326,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e9bd31e1f17681c700516fec1905ec0b","sha1":"c12b6e55bf36ea4ddfe6486298df75d317b0ba10","sha256":"f0c26414fe738023a50a3f98593a2b4394351185f9aac15806b8948001602868","sha512":"b6eac0f9382499ef7a8b66646ead3314f967ac26c5652e9e7f2cfb257e3ea3eaf37ad38b50bc74dedb25521967bf1a3f199d44709fbb8c3e0fd5c2f331be237d","ssdeep":"384:dY3gACWzmG7Kkb4NtYbf8JgAY1o1mmeXYAJzzL/eWCj+orPmsVxuQ:4gAqkbyHQ1oEKK2HKobmY5","tlshash":"2ba2d0a91682f5c33d25916ee7974b0cf15b0a1d4bda03ac5b1ca6d0036f0d1ae683fc","first_seen":"2026-07-15T07:58:47.840651Z","last_seen":"2026-09-08T10:06:23.268245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rainbet-logo-696e739d435b1865325084-69e21ba68d738684405564_457x156.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.758Z","timestamp":1788861948758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rainbet-logo-696e739d435b1865325084-69e21ba68d738684405564_457x156.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 17 Apr 2026 11:38:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ca265593ece4163274471e4635ae92b6\"\r\nx-amz-request-id: tx00000cb3e059b7ccf9269-006a9fdceb-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXV9VfP%2BjPDCqpd%2F8RHvC%2FVRit%2BGMR1j0dEkw0WeX%2FO1YanhAN5IOroX4Y%2BTs%2Fv77VYFapj%2Bcjm%2FxDKBibF4Gb9aHcHA3PNcZC6ZYAXXOLDTzwxo5uP705OY5nlvyHB8cLjbZTkjx2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bb88c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7426,"size_decoded":8403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca265593ece4163274471e4635ae92b6","sha1":"7aeb376433047aa1a3cc6421f22f951eec93460d","sha256":"8b52e4c93edd6b6761639e7217bb66025ce018ce1f2b2f73a9e6931277629eef","sha512":"f75e750b03a3664336096abbf14c869025938d470183665548785440cfc672609f2ea83ada18d256f7021fe267f86ebb9d32eb815e7e248a3be5b758688533b6","ssdeep":"192:RnVUEt182DjZXSKcrwUk5H3ZFaRQDpNnSPuYD:fUIO2D/crwUoXeRgnS7D","tlshash":"bbe1afd721c8d4b2b2495c6df8e50f2ef1c4bce84c8ade772529841189b7c60e36b252","first_seen":"2026-07-15T07:58:47.83243Z","last_seen":"2026-09-08T10:06:23.267732Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/high-low-dice-evolution-68596311c0ec6137211552_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.819Z","timestamp":1788861948819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/high-low-dice-evolution-68596311c0ec6137211552_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:24 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e7d3bdc1441907c13540e4e1770c5dd3\"\r\nx-amz-request-id: tx00000ed4f6b86bcfeadee-006a9fdceb-2e3698ac-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlQL0lymotgT2NSuRILVmEcJ2AeYSQ%2BNZotHwpyJlT%2FuSLBtfQ8VfKlCzrxBwR%2FJo%2BfqAlAFuO31GkTBpeUm%2BbdqeR9WXW8TK1gEe4a%2BC9H%2Fq%2BupBrqY9dxsGGI%2FWOL%2FCtbC3imRduY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c28ac712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15832,"size_decoded":16812,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7d3bdc1441907c13540e4e1770c5dd3","sha1":"317bd5e6fa25ab2f264890e95f1827d8b02d36e3","sha256":"e9447132741f5443a76c1e2e12d878fcab3a84f16c9bd5947f7427b87b33c7c1","sha512":"7ac670a4599edd2b75c8f4520e1e9d7e16aa3b4269e4445d6533877e72c313c989c33415f5449d6189834b17b2d26f3e64067e8732c628fb96f49899eb0d67ae","ssdeep":"384:JHcLQyv0C1LfUim7O3xyWNw3ZTG1VSFeVtO9N:pkQ1osim7OnnKFMts","tlshash":"1962c0374c1ea1f409c5e6f623d6d6c0e4980711651740b1bc08d6ada84bbfaa8bbaf4","first_seen":"2026-07-15T07:58:47.83595Z","last_seen":"2026-09-08T10:06:23.268751Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/howling-wolves-megaways-6859174d8e0af835045636-685d5d2acbbad401148117.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.321Z","timestamp":1788861948321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/howling-wolves-megaways-6859174d8e0af835045636-685d5d2acbbad401148117.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:46:02 GMT\r\nx-rgw-object-type: Normal\r\netag: \"635446978d1963cb6f82854cf14930e0\"\r\nx-amz-request-id: tx00000692da0d8c080fc35-006a9fdceb-2e41f255-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKFXo%2Fm9QXqXxnffKor2Yd2CJBTLyndBBVIKBg2Dw5822LHPf35Qn8b2vcAfX%2B9s6HNjGJM5PNxZJ2H%2BDEGTxgCqp2IDBr9vfdsYLRTz16JNC2KSGuRIMQoo4eQhhcWuPq7A%2BKpUNQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2309082c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10804\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10804,"size_decoded":11772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"635446978d1963cb6f82854cf14930e0","sha1":"378a29cc22d3c45f369b598b78119475d86277f9","sha256":"b35f48389ecb12f309d354320c0a33920ed062ee599b348b6ab590da78e5eece","sha512":"8a79df8bf62aec53d2ad010bc143f81f85172d2d9c78018996a345d3ea6dc7bba10fd313e30375132b88c2460b5d51057e694e42a10f305df91f74a26850eef0","ssdeep":"192:/AORDdX5ztp0Ae5qVy0nejhC3Pmh7f8KeGo5YrXDQKPB3AO:oKNtGUVfjo/o670KJf","tlshash":"0322c05aff5da06fc5932abe6da33f548342d805236e631706e79f2164700cafc5a072","first_seen":"2026-07-15T07:58:47.578765Z","last_seen":"2026-09-08T10:06:23.269468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/great-golden-lion-685551854b969789694370_416x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.764Z","timestamp":1788861948764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/great-golden-lion-685551854b969789694370_416x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:37:25 GMT\r\nx-rgw-object-type: Normal\r\netag: \"fea3bdfe7808b354d73c7019ad31c28b\"\r\nx-amz-request-id: tx00000c6c65969f51a7305-006a9fdceb-2e36981b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNDSLC%2FtzDUb28S2n3ux5jm5I5KrA1CVkNVCI7QFeiwgGVr%2FawdK3gWugD60OK50nKPHBQBJZddmGv%2Fx%2B9Qmn%2BTkEvQ%2BFnZYoc%2BjgCYUqumPSFBx9YpIPe85Ah3HkG4TGk%2BF6Hrt2mo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bc88f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36210,"size_decoded":37186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 416x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fea3bdfe7808b354d73c7019ad31c28b","sha1":"10522066e028f06ca2a2aa7e76bf85789b3b6e15","sha256":"edf6ef6f30b300b9fc77d9e8efda2a869792edbf84dafea54f51e1ebcc787075","sha512":"9d74e33b6b50c887f16f5016503363b79ba56b186b773ebbe660de9c94647f8125712dc892d5f290c2040127ffc5291a8ea160144003e97b7f1e71ab8b0ed313","ssdeep":"768:YLTfGBTu3qB+6WAb/e+M+7JZkbCOOVGu0C5LL/dSmt72L0tMK:Y/GQ8hhm+pJZ7OOVB0QL/EmALhK","tlshash":"c9f2f1571d210d11dae36d08a98be3068b07926560b5b2d733e10df9ee4752e3c7b8f1","first_seen":"2026-09-08T10:01:53.46593Z","last_seen":"2026-09-08T10:06:23.270307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/christmas-wheel-685910b49d6e9458776264-685d54500e35e080365155.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.847Z","timestamp":1788861948847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/christmas-wheel-685910b49d6e9458776264-685d54500e35e080365155.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:08:16 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a3fa00ddee33bbc4699673ee48e0a5a6\"\r\nx-amz-request-id: tx000004de543bc55f0607c-006a9fdceb-2e41f584-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2z8VHAREHMycifMMNq%2FMVw8GfPjpSysHaCWIJCpGwCa5ozbsIneVzg1hrEJ5qQwNoEZFOCbSQOG0N%2F46ip75%2BCmhV7YeJInzZvrBF%2FP4p9X%2Buk0hY1xN4Eg8Nk2WwRPgwUYAvR%2FYUIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c48b6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17580,"size_decoded":18552,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3fa00ddee33bbc4699673ee48e0a5a6","sha1":"bcc5ba66383db01b605cf3ade747a594041b9646","sha256":"58ed0f9751cec3aed7b2d72568664596dd3de6ae2d7481390acc2357f34a9aba","sha512":"e90212287e76f201e91e9f99f8d90ee21eac5172152867d9fa1258eedf6e5d6abe16cad7dc12ece86ab6a83925b2411bfef8dc5385debc7fb126d34dd3e55ccc","ssdeep":"384:d1cuyRkOsmhOgNIJdLPoL0R9Qspgl8x6nIFnVibB15X:d1cuyTsdgynLPoL0Qhl8tiD5X","tlshash":"ff82e177475f10ddea4a2b73fca15fe29978c59734ca01ab58c315b1022c9aaa79003d","first_seen":"2026-09-08T10:01:53.404712Z","last_seen":"2026-09-08T10:06:23.270822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/mines-685912d498f23977465142-685d58e5d4fd0995376851.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.854Z","timestamp":1788861948854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/mines-685912d498f23977465142-685d58e5d4fd0995376851.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:27:49 GMT\r\nx-rgw-object-type: Normal\r\netag: \"af5d9a3c397362fcd89280998689a571\"\r\nx-amz-request-id: tx000009ff07d25cb910e95-006a9fdceb-2e376fd5-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFxde4RlQK2Pw3eVyNkhXr29iRR3XOiJUFMiaYjyjL7FYwIuM9Z5MyMVuL%2BdfeZN7YLAnS5DIDKOGOGqJFPrxvtjciJNDGVdZnu%2F1HBT729dRz%2FC9HI34lSp792La1MWA4BTD9OQZxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58bb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13792,"size_decoded":14758,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af5d9a3c397362fcd89280998689a571","sha1":"0a7c2ba83f620789fdb5b0e22d59a78502fd12bd","sha256":"dc7c9262d14e7c96ba291307873b383391eda967d46d6317c7864786cc1f458f","sha512":"978295080ca87a7830787e8a70a345e4b19f3642cb61f61619ac3efbd26f017ef4b9301e78dfeb83440c662dd3b950f93c6d9f9aa0f40f03d589f301f1e92a01","ssdeep":"384:M8piFPUbY7uqBvwJka2NNB/0ik7MS6qGGXGJ3q5Jb:ZiFGoTNNBVQN3XGJ3Up","tlshash":"5952d0070b4d6180dd9275711a7a7f1a61dd8e06e31e1b8f35526810af3f2e1ebb7311","first_seen":"2026-09-08T10:01:53.396543Z","last_seen":"2026-09-08T10:06:23.271327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/immortal-romance-6855522e36502395893490.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.279Z","timestamp":1788861948279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/immortal-romance-6855522e36502395893490.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 12:21:02 GMT\r\nx-rgw-object-type: Normal\r\netag: \"136c2e305c5fc2bd04e8526cbb78927f\"\r\nx-amz-request-id: tx0000000ee3a71acc53be9-006a9fdceb-2e378931-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWqdtlJjLQqTKNw0pUXQzxU3enjlN3y89rU5eUo5%2BzzMYrZy3Hw13qDkcr7AYqDQNs0UnYbEbD4ALHl7TDJFoNpPPAbGA8EppRfkedd5eZxIUYd1IuHNSCCHmCnPVt0kC7D7aTPYXJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308b80c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31080,"size_decoded":32042,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"136c2e305c5fc2bd04e8526cbb78927f","sha1":"634a503c5c9b083d3ef9f4f4798b0d7b1b090919","sha256":"e277800779356465747847d3dbfbebb9047a1a93b3ed0aceba9b246a4af292a1","sha512":"c3dba0ee8b6af1d420db317be2aa0eb970bb547f3521e93f67c60ec9d2cb6e69a2c410e9f415b8dfb45198aa1c65e60802deedf15706c77c8caf8303df03c8a7","ssdeep":"768:dzUlctzpQBu5toqQilg9r/F+5L6RtUa3DePZavgJJNfP4es1AV:dYlctVVBQiy9r/cL6XUaC0oLNf7cs","tlshash":"20d2f16e916eca4d4ce800e7226ce3cb0b415b2c6bcf3669dbd5d80372511739aaf891","first_seen":"2026-07-15T07:58:47.762514Z","last_seen":"2026-09-08T10:06:23.27183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chivo/v21/va9I4kzIxd1KFrBoQeM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.482Z","timestamp":1788861948482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/chivo/v21/va9I4kzIxd1KFrBoQeM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino-au.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 12:34:07 GMT\r\nexpires: Mon, 06 Sep 2027 12:34:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163901\r\nlast-modified: Tue, 09 Sep 2025 18:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33220,"size_decoded":34033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33220, version 1.0","md5":"1db23ac1c6fae6d7576d69640d427551","sha1":"bc37bcdaddd28f4a7aa03d3a93686f4a5f410d05","sha256":"499c79a165e69a65cd2e1823c1a1ae822d7d5a09d2b10b5a8b831fdb15f2ff45","sha512":"fc2e68110a460a4d9c8eb78e62987705182d0c7764ac53e04fed0d51c1a63ed69a07674099382ac726f10ea957dfc538692d8671af216b5fe92bc84173c7a742","ssdeep":"768:Xdw1mCHPf2QrZ+CS6HObTqEOX5TILvZMBJ5OAB9tj1ckMANwSXw11:X5+fXrZ+CS8GuXuLvZ6J5O2F1cUOS4","tlshash":"00e2f1e1fcce8bcab45cb39e08b555df88745e9f24e54b2248cb6e2300c6054afea531","first_seen":"2025-09-12T04:45:25.20632Z","last_seen":"2026-09-08T13:15:20.347203Z","times_seen":3754,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":33,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/super-7-blackjack-68596b43cec35598782103_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.813Z","timestamp":1788861948813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/super-7-blackjack-68596b43cec35598782103_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:42:10 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e3545c63429405854f5cc9034ed7b0f9\"\r\nx-amz-request-id: tx000005683eca3043b2f74-006a9fdceb-2e3a135d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDnkx7wEFMR3lDqPxZ5QEX4SXsQ3jnXL8yqA0FD2flm9o2tL9HzFvjjA6xthgkgZSEkFrefrsR5jP5FVuUbhpqX90rUoHg8m9z8U3mxtY94SAMX3wfamk%2FPm6KKj01pJBf6T1Am9wUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18a6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10882,"size_decoded":11844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e3545c63429405854f5cc9034ed7b0f9","sha1":"447253de8f84a275f0e22fdcf72005acfef1351e","sha256":"4aa82f69eaf4add370f8cf6fa17636c1140c55d2b2c07785fef46ebb6337f927","sha512":"e127927b3e4a9a274304289c7b2204ca73df6c34239628c0c7fcfba37f27711c37dd6f1b34cff3f85f3c18a24c7aa906189867f85047e912c0830caefe081123","ssdeep":"192:wl8O7XawQVqtWEw3agnlTv8OlpE98izGg/AiebjKQKuoMRxjY7GHSooHo:wl4lVqtlw3a8lpE6MD/AiWjVKuoMDYSd","tlshash":"e022c061c3c0a9a4625c22091fbe48e3551cb67818f7a99cdd81f31ea47ba289518fe9","first_seen":"2026-07-15T07:58:47.814334Z","last_seen":"2026-09-08T10:06:23.272373Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/pgsoft-67a47c5907719780997257.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.288Z","timestamp":1788861948288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/pgsoft-67a47c5907719780997257.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"7a0c5af84eca8d3a2124836b7a334788\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:08 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000005260a989c6b3fafc-006a9fdceb-2e3a132b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOU6Q7sehLXZg1P50nzrwPmVYztdEcyQ4y13Znoct8%2FeeJJHEkNx5pm0PwlwiN7FtZlStNuHvF5xYocLZmQLgIQSyXGMKA9kwpjd0E5wCDNFMnuJ5A9O3rtxd80D1emszMe6KVJNks0%3D\"}]}\r\ncf-ray: a37d2308c814712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8329,"size_decoded":3299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a0c5af84eca8d3a2124836b7a334788","sha1":"576d7e2534b10cd00889e100dc682feac49455bf","sha256":"b0d5e63ab79ed44746b55b4e06d63edd158f70aec9b5a454c1c27c11d64f2740","sha512":"39699f349208ea307b1b7be9d1cff6bf5cacd6676a219b1a0cb86eef036c3fa44be5f354048c567c776dd6499b7827b04c237efec43e6033bead8231e0a3956e","ssdeep":"192:/js/0shtGSr5rwtNnOjXmqJpsDJnVVIpE:/js/DhtGeZcNOzmqJWVVJ","tlshash":"f6022185a258d1fc69454fad6d1ab27d521e2cbefa33e388cb539ed7b85108c099c9c0","first_seen":"2025-06-24T19:22:01.334139Z","last_seen":"2026-09-08T10:06:23.273213Z","times_seen":84,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/nine-realms-68556dc2bc6e1302980554.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.307Z","timestamp":1788861948307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/nine-realms-68556dc2bc6e1302980554.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 14:18:42 GMT\r\nx-rgw-object-type: Normal\r\netag: \"0bcf8b0888ad216e221fdb52ec50fccf\"\r\nx-amz-request-id: tx00000ad3e5491f94de718-006a9fdceb-2e362ebd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O82wyiYUTYKizGA6IM%2FHfAcsDrct2yvzM4KhBrIVjMTZuEyBKCFTQAjQ8VJGztO1GXZhOkASKx7D4nRkhUVcU7qpLbRAixXseM5aGFAUMZMlG%2FlPIFosv2Ix4Eln1s2NiiqqVx23cuI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308e820712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69210,"size_decoded":70174,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 472x354, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0bcf8b0888ad216e221fdb52ec50fccf","sha1":"b174ea6ed31dcfbec390ba56247f5a92d461c950","sha256":"55c8119de1d233e8457f17519b67aba2ecd7680153c3a7a463b3f335ea38f249","sha512":"8cc38748f9038c34a9e6a7c48bb3a5d941a4ad0f4118acdad1e1e7a57efaa093a7353e529435101a041e17cf406c1c18cbfd2b7ec5be73aaefb9a798b7cd5f98","ssdeep":"1536:r+Lm1fPPcA2LMopyBdkq0Hgp5x1aJ9cnbcl55s:r+Lm1Ph2RpyBdk4PYJLl55s","tlshash":"0663025ccf6b46a0ab823317c2a5a0c0002eb3aed77c95586193b265ce5439f6ed76d3","first_seen":"2026-07-15T07:58:47.839714Z","last_seen":"2026-09-08T10:06:23.273744Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/diamond-explosions-7-685530e018322021227837.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.789Z","timestamp":1788861948789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/diamond-explosions-7-685530e018322021227837.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 09:58:56 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4dda049526b05f7ae63fd978790cd8bc\"\r\nx-amz-request-id: tx00000d48fdd430fd2a8e3-006a9fdceb-2e363020-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbE7YyK%2F8NS9egpqqQ24e7q1JdRSqfjLymppUTOaiPFuv6Dq9onk5BsLFvo9FcrCeduDQGlI9wtHBlJNymC%2FR3jiS%2BgiLBHdkfJ4cb07LvafcHekvbtj6q1i%2Fi3vso5OfSXtbNT0%2FLY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be897712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21682,"size_decoded":22652,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 329x262, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4dda049526b05f7ae63fd978790cd8bc","sha1":"2dd5b0af34d2a6fed4d798b5692165189145aa7d","sha256":"769ead8c86f7db63835926e9a93e63d5f636311c83ba4d83d388c1b057aaed72","sha512":"dea24fc6d8b3c6fa9538029c336400d1aa2526753f7d6dcf8b7856be25f9db38ea659a44daa9ea4ae2d95260a002a30911b6bf02a508619ca255aa64ad6785b2","ssdeep":"384:z1ekgli+/6uWasEItYXE03QwWilv51IM8tNqIKcLV7zmjWQFWuF/X:zUkgl7/62ImXEAb2MSN17Z7yjW7uP","tlshash":"09a2e198f3683aa04f45c88ee4df082cb52831e6db1ea525749760da1edecd8cd11e76","first_seen":"2025-09-16T08:51:09.829087Z","last_seen":"2026-09-08T10:06:23.274279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/wish-upon-a-leprechaun-megaways-685942f4e859d092723642-685d6037d6403986774235.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.218Z","timestamp":1788861948218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/wish-upon-a-leprechaun-megaways-685942f4e859d092723642-685d6037d6403986774235.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:59:03 GMT\r\nx-rgw-object-type: Normal\r\netag: \"7b1ac1b8d017877b2cbf749c014cec1d\"\r\nx-amz-request-id: tx00000e244c4a198833569-006a9fdceb-2e36981b-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBtDXw81dXxlbXnpE7N%2FhMFFC0e5x1TGIqIuZTKEiVB%2Bmb7K26iTnkm9e%2BAT9FF4hiJx5ldB0EHwm09sUr6x8Qv98JIMI5bwSo1Cyis4P2xujKMBh6aJj4V6VxU8JgobEGoH1DUI8iI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10936,"size_decoded":11902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b1ac1b8d017877b2cbf749c014cec1d","sha1":"fdf188661fe644eaa5027a2ce5c433e85113350f","sha256":"8ebf9f8cbbb768b6291faddd59a0f7b1ff09066a0b4912cc3ecfbc82dd34e05a","sha512":"2a4fde8c6cbf891ec86b0c73e76a7a4874dcc7ca0ee474b5e56dc71da0bc61871885a27cfc3e803a619d8f3b66292fbe91f918ed41a9e400e3db72687e01c174","ssdeep":"192:ZLVZ3qHte6N7HAVjxBOUqaXogW1z89RqeCUGFAeXtzHBEsqjOIvZC5NySr/4s0nz:ZLHaHtb7HmBOUxBtfCnFAiuwvZ/4s04i","tlshash":"42329ee62f351618c4d4d5be253d5a763021d49c729bc31de5bb806c29aa7d23c4ee0e","first_seen":"2026-07-15T07:58:47.794093Z","last_seen":"2026-09-08T10:06:23.27495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/dead-or-alive-saloon-685508a8bb345014046184.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.224Z","timestamp":1788861948224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/dead-or-alive-saloon-685508a8bb345014046184.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 07:07:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"47b31d0b5ed055767704e4f2930e4951\"\r\nx-amz-request-id: tx00000b5ba889cfbd69bfa-006a9fdceb-2e378670-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeDkn17S%2BnXOLrD8OZhpIKjBCXglJp%2BpvTOl7PUHHwebNClI2GCp43eAeUKTyUj6K0D%2FvxiURFMRezerXRDWeHVjZnXLuXVBEbC7MrKqAN6BNTpxbtDfgqt1swadUe5jifJj9KSdneM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15428,"size_decoded":16394,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 224x224, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47b31d0b5ed055767704e4f2930e4951","sha1":"18d3aaf1de6ddd7fe196410c409e47440bdd4bc3","sha256":"e1bfb11c581db97b11742712cc8c7a5c0f47d77ed8450a20a589fd6e36660ec9","sha512":"9ad4f87e0415912774a9f31ac81959503603df0cfa1dd7edbb1b18890a339c66b1068ab798c5db4239e952c2e124c2ce2d9f411f154960e71c00c485c713f07e","ssdeep":"384:oWLwSyoeeMnqkev6H5nMdR30gesQNjnbp7XAqAP:oWLX5eeMqtv6HVMdR3evH7XQP","tlshash":"f262c0c36711468cc72da3f8c596799a6e0e17ca0c5c8778a9f8fba1cd4528d260e427","first_seen":"2025-11-10T15:09:50.324353Z","last_seen":"2026-09-08T10:06:23.275438Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/roulette-nouveau-68596b160f301193705641.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.315Z","timestamp":1788861948315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/roulette-nouveau-68596b160f301193705641.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 14:56:22 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d3deeff5838b77eb4f54d1d3be3e2b4b\"\r\nx-amz-request-id: tx0000007376586eef7b713-006a9fdceb-2e3788a5-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyuJsreH7Kfgeq%2BIUj1JZmq4EBrz4bumtNDSWxVzZA9PsulG2jHlOL6gEpOzMUKIvxAI0A7PxPEuQe6PZ8UL%2Fvj1L8EBo5dIEI%2F4gebrckzT4VNXRARczWuWPgLwijpEVE1N5nLlwnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308f827712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50416,"size_decoded":51382,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d3deeff5838b77eb4f54d1d3be3e2b4b","sha1":"85c5adb522900b9597cc56189f861cb7f8b4ab59","sha256":"3cc60b7a3c54bca65ae02a2523071b4c2ac71e541ae43b7c5cfdec3916095f61","sha512":"a1e01e0ca5c5a0e93c05fef60f9198a4f71e51c78e13a6b30281e54e397c3731bc9aaac854e6af8bc95bafbe3f26e5dddf31caf001fae7158a3121b771894bff","ssdeep":"1536:me1l85m/xZ9LIm4bkOLBXeGHPIA5vkgHuy8qscB:me1lLd/4NLBXeGvIMcXyJn","tlshash":"0e3302efd018b7ae07ab992df97b74ec9a0dfa9c5102f740375086a604f2c6085e1315","first_seen":"2025-11-10T15:09:50.358324Z","last_seen":"2026-09-08T10:06:23.275945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/boxing-king-6854fca962c15605971395.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.787Z","timestamp":1788861948787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/boxing-king-6854fca962c15605971395.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:16:09 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ece8036f0406cd63adab69d9cc27c2e5\"\r\nx-amz-request-id: tx0000027e1036eabcd35a4-006a9fdceb-2e41f255-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUA%2FRv4W3gB%2FHrRS0vUoFWuBjFUW94lzUNPpWoCIOMiIH6gc3ZXrA1PzzsleeRPz8oh0Ny%2FkHiiwA0xuA6uPRAgpYzZvaJCcDpvb1b7VbRMLxMuaJa4%2BbRBEGzYNS%2Bl0UCUOZYUi04U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be896712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16146,"size_decoded":17116,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ece8036f0406cd63adab69d9cc27c2e5","sha1":"0c6be9b67d2fb98e7c272fce5908889411d43911","sha256":"3dbd79099023e48baa54b8641890e793e8b580b9b78ff44f3ebbd0107b2799ec","sha512":"d448bc2dc788d859728f541d92bd824611e3a447cda219ec6e02e6697117936b47421931e8ea69632702bccc6d80071540e111ba2577357b3bc8c5ab7c4fc6db","ssdeep":"384:hBiRBX+8DiSzGMqtJPqVLMWtsmIOslTirLAYCjLMmUdoV5b:hARZ+8HFH1h6ObaA/dwZ","tlshash":"7172d075240c53fa6b26e925506f9a1520b65e9000fda73806aeffa31358f48af770ce","first_seen":"2026-09-08T10:01:53.442282Z","last_seen":"2026-09-08T10:06:23.27643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/street-power-68591257cf3d6648333083-685d571ea13e8439458447.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.211Z","timestamp":1788861948211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/street-power-68591257cf3d6648333083-685d571ea13e8439458447.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:20:14 GMT\r\nx-rgw-object-type: Normal\r\netag: \"28e85b7843fd8bdd91597f9eee66d8c3\"\r\nx-amz-request-id: tx0000023788f2af21cc976-006a9fdceb-2e38c94a-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqkUEbd0Pq5oXT%2BDZmeoqNeMBzMssuFPA0cst3Rx1j8cuaWDiQ6L%2BX7Bn96ETovrMireNAntze%2BmXKg8Rc3ONoVv0Hq1HO0uq%2B1GUd8LXHuQ0nj2kO72Yzch%2BQzZLmVn5QC8dS%2F%2F5ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23085fdc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8378\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8378,"size_decoded":9351,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28e85b7843fd8bdd91597f9eee66d8c3","sha1":"1fe2e1db61b7bba05ac6bc68a3e212800fdb7008","sha256":"6aa514f85e43c2427e8faa771ff7145ac2379d2c129d0b42388de9f1379457a0","sha512":"2158a40a1395dfd0c0fd7f3912997834b1d8cc5284e694e7c9272e661ae6a5244b3157642badecc8de9e00c27ec87112e90e5b534893e089ea13651c4235b86d","ssdeep":"192:7e8txdo5wIqFottJEv7u9OzlHTMwrOAvv07F:7eRkzu9O5owWF","tlshash":"5f028eb587fad43bc173333318762b729ae9a404f7e6170b1aae00206f98b5a7d1456c","first_seen":"2026-07-15T07:58:47.581451Z","last_seen":"2026-09-08T10:06:23.276924Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-blueprint-theme-dark-67d97f247f649408116361.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.213Z","timestamp":1788861948213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-blueprint-theme-dark-67d97f247f649408116361.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"e6e65f83e77c7409a611b94cdc2fd608\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:41 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000484461fe61eadfca-006a9fdceb-2e3a1588-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcghnG4MjBXEMOX7ls9awEHS6hKHkt64j%2FVi5x4kTf%2B%2BBqSTxzP4Wx0cZT2aHh%2Fc1pZVayjYTeyFagQkPxBkerPJEYndldPNj719VOip1F00rHWUXkZGEPNHAtr2%2FXTpujHcmjRtFso%3D\"}]}\r\ncf-ray: a37d23085fde712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18914,"size_decoded":7404,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6e65f83e77c7409a611b94cdc2fd608","sha1":"39b22a9506334132b326d408f52cb7ee6025f7df","sha256":"7d005ac560cb3729a6b7a4a4857bce2f5a066d1d01c4161bc0e3ab7e5ca2cd91","sha512":"b0bc97e101f3c3bad5843ae2729f20a26bdaeedd9e2624b08a55f4dfedd7414ce58762e4661c27f35ea6735c812361231c016f944ebd4c5ce41ec89678bfd084","ssdeep":"384:p2XxcvEk/42NEUP4frvoJaZo24ONKTCa0XGPSsS0SFSxc9BfIC+7gqU6++L:p2X0N5/yoBOIGXG6fn/u","tlshash":"e2820eab6bf4b3e0e09177e5a513b574ba8738f97737df05c1029aa46a9004d9dd8cc0","first_seen":"2025-12-08T06:56:23.1543Z","last_seen":"2026-09-08T10:06:23.277386Z","times_seen":13,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/crazy-coin-flip-6854fd608f755522946390.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.220Z","timestamp":1788861948220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/crazy-coin-flip-6854fd608f755522946390.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:19:12 GMT\r\nx-rgw-object-type: Normal\r\netag: \"517da4d88bfb81574bd395b2766dbf82\"\r\nx-amz-request-id: tx00000ecf5782a1b75ff55-006a9fdceb-2e378517-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KzMuCk%2Fg5WmEgBSGRxW%2BK9UWNFdrvH6jJvYDRKeBOToxhuuQjOYtKhLrxNOZT4KwUFNLOn9npHP7Fg9ZNYypiDXZ4IJn7PZBOPj2EDrieaYvtSkFgW5k0r%2BTPw3fhZ3Dfq2GGfXshc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23086fe6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14488,"size_decoded":15454,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"517da4d88bfb81574bd395b2766dbf82","sha1":"321021adaeaf21583754e1c9b2f74eb325078b01","sha256":"e8a84f94ec073b968cdbfdb7cbb5715b7fc427952f7ac2f9af54cc01cdf807fa","sha512":"c5ca47bc69a31112d6da57720ca67dbd3d4b7f4ccb00b2543dd1f535d338abea3f730dd5fb9e099d43cee1cd0b2a934f02c0f2e78203ee16c99cb7ea12c5825f","ssdeep":"384:KYJgpkmH3pqqD4q4VUhxJhrtFsgt9KP3Ml+k8mj4R7ENl:TepbdkUbJh5FX9KPMl+z37ENl","tlshash":"1352d0490c8a7b439141348f0d5e24e59b003f27dc8bd5ebeb3890b54aa2c4acb36de3","first_seen":"2025-11-10T15:09:50.333151Z","last_seen":"2026-09-08T10:06:23.277903Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/love-is-all-you-need-68596f61b1a6d365896742.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.272Z","timestamp":1788861948272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/love-is-all-you-need-68596f61b1a6d365896742.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Jun 2025 15:14:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"edcb950488733b599fd18ce38edab5a4\"\r\nx-amz-request-id: tx000007aa2d95d484f7390-006a9fdceb-2e3699ce-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llTNUzlNFYrhkhe8gUAzS8JuQ0Vn0C5K7WrN335M8EtPVu9JcCSNB%2BtCNCgC0BiWsSEjY4PzieTm885BlXkpKZfJ2O5i7llYjuaC8GrcRf8N6usXr%2BdcqlAIW5npfXRa03TEljw0JUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308b809712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16422,"size_decoded":17386,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"edcb950488733b599fd18ce38edab5a4","sha1":"65384e0938fbafa68d74afb9ae4ed41d88d9f8f4","sha256":"45bb62ead95b2d950af085578a86e3b40a379995e6ed02b2a6c0bf29f9647e25","sha512":"fb2c96c13afe73b1b12652e03bc377cfc247b50f15d7f39a53f05e673b67b77639509b7c5f2b21747ce66598c1a651f9f6dfd9a974d44eff66843e5a8fb709e9","ssdeep":"384:HYKimCSyBllhyubmJq160+LkbL1BBbLXSSPG/t9zO09b:HYKiT3XaGEIbLtXS4st9zJ","tlshash":"4772e0f46283606c2e35e74b32eb7385b84b6433bc8524b01f9467c4255af892d895e2","first_seen":"2025-11-10T15:09:50.328193Z","last_seen":"2026-09-08T10:06:23.278401Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/redi-tiger-logo-67a9ec912d189147030562.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.305Z","timestamp":1788861948305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/redi-tiger-logo-67a9ec912d189147030562.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"25455f7f26ad856b070bd5c8111693e8\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:49 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000667eedf694779e21-006a9fdceb-2e36961d-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uknadE4mWbCRT1FYqdVDVwrzrBMVVZjLkw4xM90%2Fv%2FLyXDnRgn6%2Be8sYGoZoEZNZdsQan5tNsUwPfRDpEHMypfpS6oX0nI5vxVp2Zs%2BKv6weg1xfRoPlfBcag%2Bloi8w8FqmXtZbM4gE%3D\"}]}\r\ncf-ray: a37d2308e81f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18130,"size_decoded":7013,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25455f7f26ad856b070bd5c8111693e8","sha1":"8b080899c6b99fda4f58c7277b022ca75b027f40","sha256":"a5435fc61b8541de1f929851cf081655e2c7cc5634455646578fc6b296ae59fd","sha512":"e79896afdcb56acc918955c96a09d57fbd56fd763bf178f1fe62084eec54a7a3565dc45179719e355f891b1fd8d3abc9fc23d10299ac57803c63d9a30e67679f","ssdeep":"384:ofUc4ayUV0OtAjGOuoUcdPmLg0/mut1JkoSRQtQHy:oMc4aVrncdPMr/D1SRQWS","tlshash":"c98269f98620538539472c69ac32f9746206bcfc2db3e3df60979475b6a13ea4c0bb54","first_seen":"2025-11-10T15:09:50.353082Z","last_seen":"2026-09-08T10:06:23.278882Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/kingmaker-pok-deng-68596a84c2283921843816_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.824Z","timestamp":1788861948824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/kingmaker-pok-deng-68596a84c2283921843816_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:42:00 GMT\r\nx-rgw-object-type: Normal\r\netag: \"44795d6a1df694b47f512999048d9d19\"\r\nx-amz-request-id: tx000004f9bd426c09c5ee1-006a9fdceb-2e3b4a11-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4IMsLkIhvpFDQVGZc4EO9eMGczmyF1oCxahO6N6qkT79BCdDMB3g0g6OME4AASwhNqywjiZElOAWCZDs2lxBiuV7UN%2B%2BrGa%2BjtpTE%2BreplZvgI%2BCEXELlTCVrcTBV2Lmnlhnioz4os%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c28af712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23572,"size_decoded":24542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"44795d6a1df694b47f512999048d9d19","sha1":"41689482a45714aadfa3d65c953b9f78f15c97b7","sha256":"cfb70137f26f1fec3f17fa5de3d93e11505ed90f244e6c1b321580f15a2dd128","sha512":"fd191445012d87874d31e668177b31e93869312af738c1c72aff976e574b3be571b4568674b42f5a12544570b6023f7ab9356f3232b4221ea70949d05e076b52","ssdeep":"384:0booSx2TI76YCY7fRODBRD1RvRmDQsbP2q5XqdxDYJy/gFA/E73UOo8:0UjATI7vRwDL723bBXqdx8k/t/EEOl","tlshash":"11b2f27527ab5d4f33c4ecc169a6a5e86235a7bef1371e500a0179c0682b0eb03b1693","first_seen":"2026-09-08T10:01:53.541699Z","last_seen":"2026-09-08T10:06:23.279475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-hacksaw-theme-dark-67d9afa5a135b660327489.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.244Z","timestamp":1788861948244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-hacksaw-theme-dark-67d9afa5a135b660327489.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"0cf7ddd9f0fe6b40dedcdf5d357dbcd3\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:49:59 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000cfcc9227bfefdb8d-006a9fdceb-2e378774-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wA3t4Gj291VjOxN97%2FzSy7jPy8qdIfi3%2BYI%2Bg84%2BSXU7bPPsOCNMsDiwfJUsmA7%2FTmXDgTqYh%2BS%2FIcNlvzAqb2S0CiTlCLadS0Z51qAMflLFWmwdIHybtYENpOC7GBxGiSNK6Hp1tlM%3D\"}]}\r\ncf-ray: a37d23088ffd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8596,"size_decoded":4058,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cf7ddd9f0fe6b40dedcdf5d357dbcd3","sha1":"7850370e198736c744ba3559b6de2955e7fb4934","sha256":"fe69d8479e4cc8cc17b0c1466baf207e38c11f84b8621aaa47a189ede6ff660d","sha512":"3f160a0bafc907574fd94d844c6736c43e767135ebe67056b3f7af39b3be5767c0a3cbdc36bfe4574f2b320733f9ea31394a3a04af234cc374b3d510c79aa271","ssdeep":"192:SsG4ahF2UUL4DcFdIsOAaWCb4g1XLFoFWPsIIIO0xFBtaEVe7doSOG1:DG4EFrUL8PAub71XLSxIOcNahpgG1","tlshash":"df02881acf9ca5f9de85abf4d516ecd7f80614bb3bb3e420cad61280c0528fc4a68d11","first_seen":"2025-11-10T15:09:50.421382Z","last_seen":"2026-09-08T10:06:23.280195Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/sweet-bonanza-xmas-6855013ca95f8240711838.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.767Z","timestamp":1788861948767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/sweet-bonanza-xmas-6855013ca95f8240711838.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Jun 2025 06:35:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bbee2bef69844b04962c5bc852fc248d\"\r\nx-amz-request-id: tx00000b1dbebb1f330fb14-006a9fdceb-2e3a1623-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJOwSqIhb%2FkyUhGU8YiA4%2B7p32UrmPnkBQZJkiXUyJPtaxj%2FgkNMzpXcKHeIMTgkkqScR7%2FXrBWdyNVJmhfIzCvB%2BY0cMgos9lPtIwhB6AnYG%2B%2FBaHwM%2BGeZUtGA5bQBNr6ZtTrmbWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230bc890712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9476,"size_decoded":10451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x210, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bbee2bef69844b04962c5bc852fc248d","sha1":"7ba23a353414caa150ca61ade1a9afcd62be5302","sha256":"b68e46712e220acab0f41075c2b236b92133297cfbb6a6ddb906dd6c75b65034","sha512":"c61337ffc6823bcb9323febe3dbbae5096e90d716362a93d644aa92d75427b0264e84f78c29674930f6818094c9f4795a59507088b21d1e1365e4528bc6d6823","ssdeep":"192:WAiCtMFrg7w/BFNw7nfSlvlMJo2gjF8TZGthTlMOYc7Y7F8Ssj0t8Gl5:WAiCuFrIw/gn6lvlMJo7jqoTezcdICM5","tlshash":"6212c0e1657c4f5b8b06a7ed3d10fc0351bc9f6a2bbdc8963279621187ed25e1014470","first_seen":"2026-09-08T10:01:53.534306Z","last_seen":"2026-09-08T10:06:23.280713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/providers-onlyplay-theme-light-67e30920019a2099769254.svg","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.283Z","timestamp":1788861948283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/providers-onlyplay-theme-light-67e30920019a2099769254.svg HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"5f3edd0f428184e910c0c1f5c76e36c9\"\r\npriority: u=5,i\r\nlast-modified: Wed, 16 Apr 2025 06:50:17 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx0000046c6f108c2da5526-006a9fdceb-2e3a17cc-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4laDK%2BfELq%2Ft5Zlb5o8nHwSHmB%2FsoYbSEd84XumUwjzDhfNDuhIh%2BVT2z6k6K3oFs5JWKSnUZDShNQ%2BPP4O8i61vtsMU1CdJdS08lRuotjPMNXnWEOeENan%2F8HUuc9Nh%2BXOXo7b9bzk%3D\"}]}\r\ncf-ray: a37d2308c80f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32465,"size_decoded":23692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f3edd0f428184e910c0c1f5c76e36c9","sha1":"4a59d0029911130f91ad5b6853e78e8dfd1b9d4a","sha256":"6bb93daf49a34d609df581caadf726dfef09ae07425a7d2db0798b00e10eab4d","sha512":"83f470285a7686835e7d8ad30dc5f49d1aab255662a11d5fced534761543d9a895843e4ee77d1966c224b63f0099edc488f00616611a4adf648258766e21bf1b","ssdeep":"768:GKzLJU3PNlSbIxqoFZgmUSmPrCEieNbY3onBYo:1LJU3VlSbIxqsZg5xCID","tlshash":"4ce28d16716d263f9fa48dbed3ea46022daecb6ee50048b721d15ff2766d402710edc8","first_seen":"2026-01-11T19:03:28.667627Z","last_seen":"2026-09-08T10:06:23.281408Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/lucky-ocean-6859128a2a485544924280-685d58c0198dd486841791.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.286Z","timestamp":1788861948286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/lucky-ocean-6859128a2a485544924280-685d58c0198dd486841791.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:27:12 GMT\r\nx-rgw-object-type: Normal\r\netag: \"69e54166af79757863073017c4866879\"\r\nx-amz-request-id: tx00000a40751c028f596f0-006a9fdceb-2e362e40-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SG0fkv5jzvtdwZm043XVuFDeHXIH0ZyfpXA5Tp5s1f2Snc%2BYq1rdIpzn0oKDWCw18XktzT0QmRQQHk3aIoTKqp%2BCovzDpwDj42RV7klM6o2bLNrUufbj6P0%2FlHccYmXkVb%2F8YjPYZQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2308c812712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9306\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9306,"size_decoded":10273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69e54166af79757863073017c4866879","sha1":"c10ffe8c667fc8dd63d8d8fa794623b18b2a3c8c","sha256":"bc3781a55186515d21f6adc165f0e2c70f185afa7ce85d5d166432c80606c4e7","sha512":"b35a70ecfb06acf7bf23b1c3567590fed5ff24764bf546953577d3a914af7dee4618956c80c0399b584bfae9b6bfed1e91d528e62c76cb878724b376920127c4","ssdeep":"192:tH6k8RGYxD+RxGQ0V1BSOk+A94oBslpcqZMn:x6k8RnfQWBSOkPyvMn","tlshash":"2112b08ad5a1412dc8bb25bb0dc7a71b2fb2a014fad7db5256041111f6d8bd19913ef0","first_seen":"2026-07-15T07:58:47.838747Z","last_seen":"2026-09-08T10:06:23.282099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/rise-of-olympus-100-685500920b158582024010_365x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.783Z","timestamp":1788861948783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/rise-of-olympus-100-685500920b158582024010_365x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:35:27 GMT\r\nx-rgw-object-type: Normal\r\netag: \"5691327929df2be0f63ea1cbb27fa74b\"\r\nx-amz-request-id: tx000003f2405e82f7072c5-006a9fdceb-2e41f2b9-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GAaYQplzayKkrenN1Uu46AQ4bpS32ld0mIfMIVoZtpUxmQYVLoFSvi65btBd4RRks5ZBDOGpKVjcmzoqTHGcx1p36OXYIQQaYqJOKBCKpYz6EpnUcZcm3YE2Zdjkt2eaGa7Q2N%2BVnU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230be893712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26026,"size_decoded":26988,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 365x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5691327929df2be0f63ea1cbb27fa74b","sha1":"c3925faf13bc108100b7831331ac493ef5c46809","sha256":"8423fca0efd65305ec3b25ccff88a3d18619fe296e7528ca953d1b875baa3c6c","sha512":"4b1c9a88e284c6642ce37acbfd80078bb01af817f5c83f5d0f4e29c19e04476d418b73ef007e3e2103b1645226c53ec6e1f54eed4e8f4884137062537b35ac21","ssdeep":"384:yIxu84TWntdAXxUymwDO5BYkfbaYKQKi60Wa2K5i4z0zJNkaxaj2ELoosKVmB1O:r34innrymwCHfOYKf8i4zWa/LHJmB1O","tlshash":"20c2f1a48fece2c164945dc33fadf6a4b43139d294929551e039baae717ff3ac10da00","first_seen":"2026-07-15T07:58:47.758886Z","last_seen":"2026-09-08T10:06:23.282596Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/pai-gow-68596441da1c9821417398_312x312.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.817Z","timestamp":1788861948817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/pai-gow-68596441da1c9821417398_312x312.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Wed, 15 Oct 2025 11:41:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"3560b4b57ceec25ff82a698316f6bb57\"\r\nx-amz-request-id: tx0000086ec7e918523607f-006a9fdceb-2e363020-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 273\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cUGbyrUjRo2dgXcdAM%2BqxQRjpsvvEAJwVq6VJV0FrwFKFZokbBOxoFwszQ7O2l6%2FwN%2Bz9FyhX24vGYi7nzp%2BTrTJNSXyvLlRvalw%2FPOwx7q2K3dt14B9tZ1E4KOlguNb1gy0vMJHqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c18aa712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11820,"size_decoded":12790,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 312x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3560b4b57ceec25ff82a698316f6bb57","sha1":"d33bd04be3179185b4aa8678e0fc667f0523641b","sha256":"c7f62467b71a379a5306b2aab22acf6278e86624a5325b732d8d6e484b274f20","sha512":"e721b931b6f4451b91f83d2c80f3b36019584d4c1bf8f0707886b17d2cb200540c2638a7b21b455521335639fdd3d154134d5819332f21cb72464ccd1c3e5b59","ssdeep":"192:E80wqBLGQRNDJY77n8Ay/2KiCJHHP2cphLOVROSZKDy1O0uGeGWeOeWbEEK3:Ef9BLGQRnYP8Ay/2K9lPdLOVROi0euGJ","tlshash":"4c32cf5b33e7d39efa48d60384d5f3737ea5db4c98b549addd52b82801060e902899c7","first_seen":"2026-09-08T10:01:53.529753Z","last_seen":"2026-09-08T10:06:23.283095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-au.org/media/poseidon-battle-68591304a85cf053205956-685d58fd2cfc3166803864.webp","fqdn":"rainbet-casino-au.org","domain":"rainbet-casino-au.org","tld":"org"},"ip":{"addr":"104.21.96.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino-au.org/","date":"2026-09-08T10:05:48.851Z","timestamp":1788861948851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-au.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 03:24:13 GMT","end":"Sun, 01 Nov 2026 03:24:12 GMT"},"fingerprint":{"sha1":"9A:7A:59:2C:D2:F3:58:A6:DC:4D:8C:34:C8:81:80:18:0B:5A:16:3F","sha256":"E4:A9:E7:DF:BF:B4:9A:C3:F7:D5:96:0F:FF:58:FB:8B:1A:F5:E3:FE:87:60:B8:F6:BD:6B:21:7C:0E:DD:38:11"}}},"request":{"raw":"GET /media/poseidon-battle-68591304a85cf053205956-685d58fd2cfc3166803864.webp HTTP/1.1\r\nHost: rainbet-casino-au.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino-au.org/\r\nCookie: http-cookie=1788861948.678.1930.16436|882e00fa803f76adb4fe2898d9436430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Jun 2025 14:28:13 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8e54067738bbe1b96667e9cb9388884e\"\r\nx-amz-request-id: tx0000068584d1b58fcce13-006a9fdceb-2e362ebd-fra1c\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 272\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roeeMge4%2F8I44TXy2klu6sTTLaGWBAGN2diAPSB7exsOronh8gb8DwetE5wDQdlwh6gLMjGchG0CdJbn6JMLINgqvDs%2FAiAtUKsQyxD3xV4bYpuTMGu3%2Fo218CfpJcat9VJNRg0oz2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230c58b9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10480,"size_decoded":11446,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e54067738bbe1b96667e9cb9388884e","sha1":"4937a3ff2594d34ee62f5e4b077fd09286f07470","sha256":"20b8ceb77a4470c577d071cc2ef337d72b252169258b85befd75f4388d884e0e","sha512":"de8cafa36d8bb8ccebcd0d0489819d3b96f6f0b0fcae5e2eaa12f0af0390f86f683eb2ac872f660cd73ffa657cd4313bd5aaf84e17fad79af2524dc6395c00c1","ssdeep":"192:tLTRZec0StUzJ1mceAldxUhoysbFdNk7hgTFJwY0HsQXVNn7Onj:5pU11mu7xUX2TX5JwHVNn6j","tlshash":"4122bf3492a1345ac80a0b3f066f743c66fedf115b251e2b64e3d6c30660a565b66522","first_seen":"2026-09-08T10:01:53.538462Z","last_seen":"2026-09-08T10:06:23.283627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-casino-au.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}