{"report_id":"70e327d1-e11a-4879-8ec7-f9a1d8422226","version":0,"status":"done","tags":[],"date":"2026-08-07T08:58:10Z","url":{"schema":"http","addr":"rainbet-sweden.com/","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"104.21.45.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-sweden.com/","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"title":"Rainbet Casino Sverige – Spela online \u0026 vinn snabbt | Rainbet Casino Sverige","dom":{"size":41829,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25176)","md5":"60c146a596d8e3b1cbb96f9126a0b587","sha1":"4e4edc5ff92689f98e65af9302b02707d36808ba","sha256":"1e3a55371c2bccc4db89b29c1cfec2554f90315011119d4d387ed76ded0a4824","sha512":"e179041d41a46e6f7556f0c71b3f5b9c17b150b90b60a7855e7455a1ee84a102f3296f2eb5718c32268ffa79989c37da19c3703e3e9cccb6a61492cdb1b55450","ssdeep":"384:C51aFayJTFWZvljQXzTi6pemPkbnlAtN1y8yDX7iwjcTs8KT05FToGgTBNTUTOBp:CA0OPEenBNs0RafsifpXnrcnp3uYN9cX","tlshash":"34130933a1005f36147313eefa41521f83d9a149c27e5e8476cbceb6add5fa4887928b","dom_hash":"domhashf38ee8fab197b22e2a9650dc3ee32bd3","first_seen":"2026-08-07T08:52:48.032176Z","last_seen":"2026-08-07T08:58:12.467302Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-sweden.com/","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"104.21.45.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T08:58:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-sweden.com","ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-08-07T08:52:43.368321Z","last_seen":"2026-08-07T08:52:43.368321Z","alert_count":34,"request_count":17,"received_data":1680980,"sent_data":8835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-sweden.com/","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a05a128b7a43f61ad654fe477b9d7f80","sha1":"b94bd7d8ef5dac12d47507e4e56e89acb5b9004c","sha256":"d48d869dcc46015005d1c13cf1d619154f2547ef82e9f1e15c14f528ec10099d","sha512":"ba8bfe26e70dea555d95b20a00095714db410314d39d11cbff13e445654c8876bd4d15ceb510f859aa0692833be5568a5bd9bf3818316cc0670ee49e53e16d2d","ssdeep":"","tlshash":"3af0273b72aa0c35016795ab538ae7a9362850433002cc493f2ccb402fc4e9048b6ad5","size":465,"data":"","first_seen":"2026-07-18T17:14:48.510862Z","last_seen":"2026-08-12T01:39:37.464589Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-sweden.com/img/logo.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.836Z","timestamp":1786093062836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBu58EOokTRiP96cb4HCBoIMo0idx89j0xrsFFo2ekAygH0feKrltnm7SbX3WgF6rnOskT8nb9VubXgOygEAEInFQ0rHFAiSWhtVEbUNXyeQ1GNqlg%2Be7YzqZK9naeoHt%2BNjvig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ab84232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-08-12T01:40:57.442677Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/vip-loyalty-banner.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.841Z","timestamp":1786093062841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/vip-loyalty-banner.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c12f657e34a7c3d982fc13d58a6938c9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKC8W8N%2BOr%2BDgtWS8fJ2Eke%2F%2BSLfREkE%2FFYbrk1IU1Z0KbSuCJqtLvE2jzt%2BaIc9Ia1VGJb83bznhRaUlvmIX5sRnYrOGDsTNRQ8qD%2FYx0DN5mH5LueWcI2YFeodP1fIdb5%2FOvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ab84632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42996,"size_decoded":43671,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1024x1024, components 3","md5":"24384f3e4f451d6a2a70d722b8a42de8","sha1":"b8cd369c96c0245a586ec368b42a3295a0d965e1","sha256":"240aec470a80d06163d3c77bbb7c9d70e38a53f2a1eff2b169ce98cef18807e2","sha512":"70d1adfd2f23f374f1d9a01891507fb87567c32296177830dcab0aec4322e8d4b864a81d9da16fb88d6e2ef5cd59925a01f8095a85871f79f322a0881b4f1057","ssdeep":"768:CWCU0VDqnZlWrvbNyWgj2nUISYlqVDEZo9XXR10/cWYhbi4S+LpJ6LX:nCPpqqrjNyWjjS1N9XXR12c50LX","tlshash":"a013e073f3125807dcbed63add9b135af77b541ea34c4a7f2611283218617496c9e8c8","first_seen":"2026-07-18T17:14:48.503679Z","last_seen":"2026-08-12T01:40:57.447125Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/tiers/diamond.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.848Z","timestamp":1786093062848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/tiers/diamond.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2769acaa45c2b91d4a6cc1fac722be82\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaVufqwzOpZN7nOnTzTq1YgB9IWmtGEVQjPtngt6rZ4P3iZCMdCTMpqtomk2NtbR0TOlnURzE%2F%2F0AITs0LIIv0mLdWxpGMr7uIHf5hYb4%2BJr0VEMd5JhElh9SNms5C%2FS8F3eXjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac84f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9032,"size_decoded":9698,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae4bb54139d7236674683c6b4021ba66","sha1":"d81e40fcd0c971f67e4764a5a00052d75dae5d9a","sha256":"a907cf508611155935e4b46414e8b74dfa15ae3b43908c000c94857a2732415c","sha512":"2955e49bf631d36ada9703df1ff45b3cc4be7c0938f26789c09b195f0c223fa365aa59d88909e8bdda06283163cd066f5bd2b47e8bb3f0e94c70bbee1de15ab1","ssdeep":"192:c6HS31i7GLf8XjBotwc7dA7ccMwmJPUAS1WQgUTyu+0TvynCo:+1iSb8zuac7WccMFPUAcTgAyuqn3","tlshash":"ac12bf649d9bec0ab10d7a4df6046f8abc8e5438b51d95a0c98a32ec722471cb513fbc","first_seen":"2026-07-18T17:14:48.502735Z","last_seen":"2026-08-12T01:40:57.440213Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/mobile-app.png","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.852Z","timestamp":1786093062852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/mobile-app.png HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"339b5cd314258c4e9c2eaf8c17e2695c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7p83%2FDay7GsDkfs0wWmlj5GcW3Cl375I3oQf7xCaxPqNLx44c34n66HoUt1sq%2FtVugDS86vRO9N0udf6j6%2BvVapWBln5V0m2DQJuoFUkyXQbSjX1r6Cebba1W%2FGrwOKwGvxvhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac85432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1208191\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208191,"size_decoded":1208859,"mime_type":"image/png","magic":"PNG image data, 1603 x 486, 8-bit/color RGBA, non-interlaced","md5":"dc1227822f58aa2e84d0d0ce50121577","sha1":"65f902a1a7abe845ea6e59247ee62466dc6b65e8","sha256":"29b843911ea1e7aea6ebbb15d1270a8b203a80c4c6da4b8e58e7d81ecee6c541","sha512":"4e1da3d9c0b6b4050834dfa2a5493d6781065d2d9e6749d3daf1603259b319307f6228783e71fbcee71c73e47daa8b584774befd2a3068b0c7f743cf34bec4ab","ssdeep":"24576:8ihJPQH5W7moqKLjxRcmoMRS8YPnNx6mdp:5QH3cjxeKRG6mdp","tlshash":"212533f3b1fd1af6bd19a74b12dcc008ed8a0944e829fcb65ba1d4149b76262c821f75","first_seen":"2026-07-18T17:14:48.507898Z","last_seen":"2026-08-12T01:40:57.444956Z","times_seen":10,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:57:42.291Z","timestamp":1786093062291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\npriority: u=0,i\r\ncontent-type: text/html\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMo5XrAed1siekhlE9h8M0c1ZorLeqUi5hPiT2vm%2F4mES8QmJqHhJ16ZfHvpX%2FXH5c9wbWT%2F4ka2%2FNzFEGcts8ijpZbLKrItKaPDz3xLOFj2OFsCV1smoAA2HYK%2BEItNHW12oFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a27513477f9d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41558,"size_decoded":12713,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25172)","md5":"ce5932c32a8beab8568a117cf07fb285","sha1":"e083d9c8b45eac4844c9a3addf42618bf773a08a","sha256":"6f77d99e52239f497d7f30faf8ff7cdcc71d5ea4b4f2de0e5299805b0fb27530","sha512":"6bdce5309d3a4fff1659deaef97e85b7458b6dc5a709275f2288fa23519c62109ae836dbb239fa3be5e9af3c8e3defdeba425e7a9c8b6dbbf8273dea0fbf08f6","ssdeep":"384:00AaFayJTAbEy8mD8+6j6+vdUf+KgDaqWN5bU2I7JmHWjpFWvsSWRrlWENizWH8d:0tGA4EenBNs0RafsifpXnrcnp3uYN9cX","tlshash":"0913f87361006f36087313deea45561e83dda109c2ae5e8476c7ceb7edd5ba4883d28b","first_seen":"2026-08-07T08:52:48.047607Z","last_seen":"2026-08-07T08:58:12.477736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/casino.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.839Z","timestamp":1786093062839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/casino.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1466736787b3527587735d58c2224bd3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bpi9ubxYYHHTQy0NcnBmFcK%2BavWo3qRMwlCFCwKdNLAGkIDzyVzgjDylr%2FAWJk3108WK%2BluK%2FwznxDUXRNV1%2FuCrdRoPrJWTZBEn6Lk7X76y1CO5V2TLkb14m%2BYqW6cbHPKaNng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ab84432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78270,"size_decoded":78943,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c493472544ac88f757db77d0b524ad3a","sha1":"16e5d055af62d56e19cfcb8b875afc167006013c","sha256":"235077863369da5895e6a1868173e91869c671e39414b78a4ee0b6507a57a51e","sha512":"16719b2495faccdef216ea30ddd5b3100f9f723febf19c54779fdd4d3033c49bc2a386e7d8a426c1018af28ebc0d4e9b3a917525a999080a1e1fae63c93fa1c6","ssdeep":"1536:bfW/wpoB8jfe8Qu1Z7T6ctmxeaD/Yh2FF++jvGNH4JDt:b+/wps8a8BDteeQ/ks++jONYz","tlshash":"3b7302e4735b62bded63573a3214cb388a1d3703a677a4b6ac0105b314966f12fbd50e","first_seen":"2026-07-18T17:14:48.497458Z","last_seen":"2026-08-12T01:40:57.444322Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/tiers/gold.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.845Z","timestamp":1786093062845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/tiers/gold.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"765ad0c180d050273b6228008aa80e14\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OD7BshsRttnxIC9ekxExcYjCieYiZlj8U%2BgH5zbcAy6kf5WkkF0M1y5h8e6lOti5V2FsMTRGjancGW3XQL0vq8TreVy97EOuctWvhMCIXLPkp23aGAA1v3ByzUDzE%2Bmu%2FKHQJ7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac84a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5102,"size_decoded":5766,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e375405062a5151a67ae46bfb7d01e9b","sha1":"72d73635d7da0b0031307dcb45aaed9d7ba73807","sha256":"d5bcb6c98c40d42cc0f389d6e9ad00136ec5fb1eecbc1f0370fb52d428c37f08","sha512":"5e1fd41c0c351d6fb560623dfb407651d3b7e490a01f15bf52b99670e5519e37bf2736bfe1084b404700a0031667e4a5d53ae1c8acfe4a8cb4a74a97fadb8673","ssdeep":"96:Ji7Ej4MHMNcqU1mYzbQV57rR9UlZA96Jmgx318NQql:JC+4qTB1mYvK5zIZA963hK9","tlshash":"0cb18e11cce80566bfde7ba3861e21eb644e6353db32dca465a0df476701871d6fa401","first_seen":"2026-07-18T17:14:48.505699Z","last_seen":"2026-08-12T01:40:57.437891Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/rakeback-tiers.png","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.850Z","timestamp":1786093062850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/rakeback-tiers.png HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7c857b523d92e79be0217ce4475e5c21\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQiEMS0HnapGaHPpy00hKgjRrNq0ZQ%2FO1wfbPidrANjjTJK2mRTw4GhTFQSjq3YdTKNFKwuZ8dgEotTrmEnotJBofAd6E8j4UPDRyDBdApvbXRK62Ic9FgnPkgUMpGwMGQcA4XI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac85032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55570,"size_decoded":56230,"mime_type":"image/png","magic":"PNG image data, 1490 x 380, 8-bit/color RGBA, non-interlaced","md5":"eb08c85e52b0257d2d07568da26586e1","sha1":"915b18f6e67fd94aa53023a82a7af334db0d6516","sha256":"36fcec22fcd8fd5de8de38af0d27f5952062fe447dce21c8ac5ddd0c673b959e","sha512":"7bed8f1f709fc2ce2033061064dad83e3d96fdf8f5c11ecf4504fdf3f60b634b3d140e45a1dd66eeb505d40eb8dbebd84ad40dc8078d361c1c9b33ff9c129cbf","ssdeep":"1536:TMC9W/5VlSRIJODB6fIfL7elyFQR0Hrue0A:nIBVlg2a6+ewHrH0A","tlshash":"4c43e1b0d94241a3f46d91f7efd707a5333ffb925c500e2412e6a6084b917b23d6a9a3","first_seen":"2026-07-18T17:14:48.506701Z","last_seen":"2026-08-12T01:40:57.440975Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/homepage-banner-bg.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.906Z","timestamp":1786093062906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/homepage-banner-bg.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-sweden.com/_astro/about-us.CFn9e_Ho.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"02bdffc74fc81199c5f71e7fe8606c85\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLPD%2BLheWKHHbo3b24P0yNgY9J7p6V5e6sZ5tcrwKpv6%2Frlyjavos1QiEhzQxVNahUTGFu2y4JqtCdEtTGJWQrnFiIiI%2Fv61VKbas5BAEKKkCfiKkPmPKNrt%2BQgPVRoymEaEY9A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275134b286832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12214,"size_decoded":12881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x246, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f37a7c782a2a400bb59c0a304ec51bac","sha1":"d34383693f29ea6767c5c2972d4baca13ad97a55","sha256":"385dbd37d94f4c319817d01b79a9b966eaad4eec73a90c5f714d52ec67422750","sha512":"c97a935dcef56d9f9b58e5bf42eaad232f47ef765b1081a61bef5bfbde8fdcc8341a1194671f2b314902377289e92e4d1372d328745bf4ade9baa61a525f4e47","ssdeep":"192:7DU6CR9sQ4gYUsaO+hXYg+CMM7Y6E3ptHujYhKQUjw7+/eN7alYctQD+/+J45g:754FYA9CQ2EmvG/EaZQD++4K","tlshash":"9742c05510f0bba762a1e22c727728fa2d380c87b77b600602cc6628503e1b6d254d2f","first_seen":"2026-07-15T08:08:13.868985Z","last_seen":"2026-08-12T01:40:57.434808Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/banner.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.907Z","timestamp":1786093062907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/banner.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"826d251c15e0b7c803e6dae0c095ef8e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcpunL6O9X0z%2BHaTLz4wjJtMk4BeXrl3nLPnhrPmTNK4dnYE8hA6ENW5WkOMZeIBSr4ubAtlnRl6ZYhf51TkMVzMpMMgVY1pcD%2BZlcEkDcmAWtNLCBCoFkMBmKx375Pp9jAdfb8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275134b286a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15538,"size_decoded":16201,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1504x688, components 3","md5":"6bd7f5796057b4bb27098a025888ff1e","sha1":"4302fb76bcc0c9bf6f181140c5f36136d7f03c55","sha256":"abe3bc0476142dd6311340f09b78d3962b66764eb1af573ca89a28e54319c881","sha512":"de75d6acfd71a70b9cbc99cda3fe6f56a37836ef279870165c582228b627129dedc6cc06234cf45f2b8343c51c73edde7e5b32199f5aeaf16e602fa8489df123","ssdeep":"192:No9nUP3F+yge67wzKCIrYOODXPrkRkm339Z+Dxf+k4IYFFLxT5sq4L13qUepX7w:NSa+le6s0UDY+mn9ZE9IF9xT5wVqE","tlshash":"af62be73ff958b97c38a873da0cb0b349b516079d52a45ed9300522733c7b29ac198af","first_seen":"2026-07-18T17:14:48.493341Z","last_seen":"2026-08-12T01:40:57.441666Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/tiers/silver.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.844Z","timestamp":1786093062844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/tiers/silver.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8af4e1b84848b209781c45275ea7b9d0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZQLkdZLacbg1e9up%2BofhUjAXCm1aKT4eUvIU7B9D9KmcNTJSt78MQBrXk0DH1hFoXNg6mjh0fTdTJYw37wXTLPngaYvyb%2FZqn8v7jkUBiq5wCCxTyHmxej%2F%2BktO7k%2Fu1ig3Gls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac84932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3894\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3894,"size_decoded":4562,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d53137822add98bd4ce2245781b6ce6","sha1":"0369664d4092660fd890d23429169f8389c88019","sha256":"4bacaa103c376ef1e72a28e39aa2e36a38756ca463afe7388ed101383c3438f7","sha512":"d68a79b7d2435656139071c53a117a80581f03dd67b4de71e85ae48bb9a7bbcf9a08cd5979ad020405510351e83818152de7fb515f210e3f9f56d5e63cc9c1b0","ssdeep":"","tlshash":"dd814bfa9ab2c056e1d2f6b72432306683d6f8d3e66d44df423d08417e249523be803a","first_seen":"2026-07-18T17:14:48.501892Z","last_seen":"2026-08-12T01:40:57.446526Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/tiers/platinum.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.846Z","timestamp":1786093062846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/tiers/platinum.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3cede765e41c00362bf4b084dd729775\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzoTFzhBFa40yUKrryxjmza3s97r3roelDClRBk3AFSjeAibOJ51zGwDIcz500BZYlykm6fO3J37M3izqjmKkwW0rTLcNeSEAj9zrKwTociKtqirkYCWvSAUPiIVqutaQjIp4aM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac84b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6578,"size_decoded":7236,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ca31f5e8329520c8c12490982c1e819","sha1":"9014fef7bbf7b666a951b292ffd4d2f4591996f6","sha256":"917617cae4195612943b72d64988aca84b6b34261a868fa3d71b378044797ad1","sha512":"b91e3fe9a5b98e9d9566896493392dfcb7da950f59d53182807a75cbd20ff8ead85ae49762c8a2124ee2bf39892d26358270b62b43242395129f8242d53194b7","ssdeep":"192:iO856jfPrxFIe/pq6enIMpC1Hu6VOIxIP:id5WrxFIecIMpC1Hu6V7xIP","tlshash":"48d18de7547fad694d8025afd384b108ca177a0776597b6e2b008ca0013d28be841f17","first_seen":"2026-07-18T17:14:48.49553Z","last_seen":"2026-08-12T01:40:57.43918Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/sportsbook.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.840Z","timestamp":1786093062840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/sportsbook.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a447e20a64d8fc4ee021b398ce196680\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQjV4bNV5FEPCs67zNmecYSRKc%2BuevneEuLjLNaUJPKXKuGBkuPVwAjeLY2xQqEKIYfYOqHU3WD%2BT%2BE9%2F4ARpb5xO1dg8%2FxcvuinIOmy%2Bh2phJwOSzhURwXeEzyARvmloQVgV0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ab84532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118048,"size_decoded":118720,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec841251d3cb09f7080e3b048dffb1ed","sha1":"1b5246bac52d26d8b7863984fc121dfe2b9f34cf","sha256":"6ae0c16a2d8ecdf6e8f2464cec439250be6663dcce5b077bf1e99cfce77c4333","sha512":"8f0e17fa2feeb63a87332bfd5a18615f408e789107179268c92db5839e3595f4ed7593d2ad93eff321171ecd6617feb2a4e7b1e5a7a756d3b449c9b5123091eb","ssdeep":"3072:I3f5F9Tq0wKzGrY26+SQht4B20jwbV4AkexKNmbcUd46WR:CtVlZLQPM2swg8lcUWR","tlshash":"50b3129dfe810219f17239b63ce972bf7eb3956598effde2881a0203845944071ea4f5","first_seen":"2026-07-18T17:14:48.494561Z","last_seen":"2026-08-12T01:40:57.436657Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/tiers/bronze.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.843Z","timestamp":1786093062843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/tiers/bronze.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f92221dea968bb4c906ed03c9b34beb6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYs5w2jql2d3DWHO1CLq2Q9w76on%2B5Yt1dNaxlBHqPskXooIOtiSQCYS7iVI0T6y9PW2UWXh4HPXTYEFOM%2BYq8PXtrtmYS%2FpXAdl%2FH%2BDTKOh4AtxAO7TGtKvaS7FPOZkAsryFYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275134ac84732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3984,"size_decoded":4652,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76b0874e8893b50fdc077b62789de228","sha1":"9b032c63a89bfcb77cf82999bd7e993acc1611b6","sha256":"1b9ff62bebfb8e7ba5f63d9e26dbfe7faf069591173b5307fa22a1dd5bd24a79","sha512":"321f50bcea81c4b49741fdc8d27c13d593c1f98648c0a09eac1ff2a1534ff2e5b586a27ccd59579d4389aad0e5ec77b743705e872aaf69c7c219f04c07518890","ssdeep":"","tlshash":"3e816d1a2f070373d52b2836bffb6b056db55db8170823548c2ea96ad830178d376635","first_seen":"2026-07-18T17:14:48.50092Z","last_seen":"2026-08-12T01:40:57.437242Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/logo.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.960Z","timestamp":1786093062960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rbW0B14rYnM%2FI4gjFlv21fFBgC2ErgmJG41397lC8SATJWHG611AWbiwZOxwbLgW9d164BulxPtldR9HjfOwgkqdQczi85Mp4xJajaJnVM5ijo22YfTaQS7aKj%2FYn%2FagG9BzMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a275134b788332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-08-12T01:40:57.442677Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/img/logo.webp","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.961Z","timestamp":1786093062961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxqZ8uxwKxqxQ3k3FzDUIshzSw2R9nOknthc5HYhRvlIBvzNlMq0MG2E2EUt6Sc0TkK81fNdmQnflaGIlz1beuOXcSdk5IqgcnHaKH83IljKDIxYqGo%2Bn4QH58N%2B%2Bj9ghIYlObA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a275134b788432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-08-12T01:40:57.442677Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-sweden.com/_astro/about-us.CFn9e_Ho.css","fqdn":"rainbet-sweden.com","domain":"rainbet-sweden.com","tld":"com"},"ip":{"addr":"172.67.215.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-sweden.com/","date":"2026-08-07T08:57:42.829Z","timestamp":1786093062829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-sweden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:20:44 GMT","end":"Sun, 11 Oct 2026 16:20:40 GMT"},"fingerprint":{"sha1":"35:28:91:9E:FE:49:F2:87:57:B8:5C:A0:06:45:44:C6:70:3E:7F:AD","sha256":"CA:C2:16:EE:27:29:D9:AB:34:8F:C7:B8:5F:D3:3D:D6:CE:4A:73:87:26:6D:15:80:F1:CB:26:3A:81:3D:37:78"}}},"request":{"raw":"GET /_astro/about-us.CFn9e_Ho.css HTTP/1.1\r\nHost: rainbet-sweden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-sweden.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:42 GMT\r\netag: W/\"5ba57fd294c90b4670a7c1ee3c39957a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5McmwzAAdYavIn8Tlkmh2TiCmiwgNpjFFuyAR1%2FgY9BSehl1hNYuAcJqIpKXqaey5UVScfGACVPF64cH4lod%2BuHLvMRoZ%2BTBt1EPyxeFCm6y0Vq6nUsWa6XyRhVwocYb5TnwrY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a275134aa83e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16557,"size_decoded":5316,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16554)","md5":"e1cd8114d0a515b465cccdc1b78b7ab4","sha1":"df2c769b6b4aea93b9e420bb77138400c1aa10c3","sha256":"e25a011d4a9da1f04f1b5d5d0fc7ef92d5b38e3a2bfdcbf9453b6343e4c88118","sha512":"db765d9bcfb0794b87471d8ff41d5bc965237588b7b3f7598d0317a26ac59841da59238371df5d186e27080960d65b9d6db1884b751dc849a5e4a9adedf4cdef","ssdeep":"384:HJ15CiSnhf4MBhmV3orlrS7IM0CegROlh0zJ2jrEiwGgq8gigzIgLBgt58H/:IiSnhgMBhmV3opr3MSD","tlshash":"7a72b971b714753cb427e529b7c4a29d7110b412ca2b83d8fd82a674d8c77f31ab1a4e","first_seen":"2026-07-18T17:14:48.509923Z","last_seen":"2026-08-12T01:39:37.462186Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbet-sweden.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}