{"report_id":"77c05b5c-42e7-48a5-979d-83e724829a7c","version":0,"status":"done","tags":[],"date":"2026-09-27T02:42:23Z","url":{"schema":"http","addr":"rainbett.co.uk/","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.136.241","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbett.co.uk/","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"title":"Rainbet Casino UK | Login, Bonus and Free Spins","dom":{"size":28437,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1022)","md5":"56394bd3b5bdbb668092f2ccb14eea5c","sha1":"10aa106e58765d8b3f3567a0ee0653c1d1293028","sha256":"68a6f18c76e69d477a6d902dd4854afddc3f7629158778c245545e26d9c18e02","sha512":"1d499fa3a190461d36fc853f07354f366adef801bb73cb720384ba4f4eb6da8300b9ce37b44d22ac22cf61327d9460ba104155cb3fb3fb7b6a54e68a0ed6a70a","ssdeep":"384:9x44qfGNFDz3uu6G+0bqZ/ngxEnNc2FOAhr2LK2:9x44qfGNFDz3uu6GPbwxnyqzB27","tlshash":"a8d2731390f04673028372f1bd917f3eaea54107ca1ab9137abd455a6f99e1ec833a4d","dom_hash":"domhash08f4a6751268c7adaa2f66c8aa7fab18","first_seen":"2026-09-27T02:39:28.472286Z","last_seen":"2026-09-27T02:42:28.313765Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbett.co.uk/","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.136.241","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:42:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbett.co.uk","ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":22,"received_data":489169,"sent_data":11486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbett.co.uk/","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c395c36582f49700bce21aba95b8c366","sha1":"3bd2597c59d4a3dbabb5e07323b4f8796a328073","sha256":"c60545b64a4da05bc093084c80b0a9b9c6901c217b9d53199574270bc9c9697d","sha512":"b7ae792a9390c5832782fd11de5cf079358acc74baa449b0646617354be48ee7dd3c6476e923f731c5da25cbd283720a39dd9978249e5860db314b0f8bfa8cae","ssdeep":"","tlshash":"7fc0122243fe2dfe5031e55f2cfa6d56b3ab38294465c0641f80643059b3547c7d0384","size":192,"data":"","first_seen":"2026-09-27T02:39:28.497314Z","last_seen":"2026-09-27T02:42:28.37034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T13:46:14.146458Z","times_seen":440241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/js/main.js","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ed533eedd59083d1d1e1fb2531e40ef","sha1":"4a220b4cdd8357586161cae55ad31124032c8b4f","sha256":"43eb4500661fc9c8982449a9c265d90be8cd35dc3e5096092018f37d7440901d","sha512":"aa3cbd0b1b38bdcdda340acdf67c09b9369a3934c7dbb64518a30fbae52bb279c4a6f9b03842fcac4825b831086697ee6449020c9af4ed4e587886d8fec70ffa","ssdeep":"192:xOFrAUgCNNZpcJXY704c56kA6dsRfEMDymPQjDL9pDxZoYriDdQRDL9pDxZoPBA2:M3wrDxOYrK+rDxOPBf6DS35z","tlshash":"d6122419a1b75076007b72b75bc7124a7324146f7505fa5a7e2c8b0a3fc1a60caf1bdd","size":9082,"data":"","first_seen":"2026-09-27T02:39:28.492388Z","last_seen":"2026-09-27T02:42:28.359887Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/matomo.php","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c7867d79975e810e02b0f71ef426a64","sha1":"dd7bd7d0d060506a3fe67518b6fdbaa694129ecf","sha256":"cf75a64173bf9134e5013b1d6c5e00a63c5d5239cc952e3a0a99529facd0b344","sha512":"f2795a501c2b5efb454b82c3e440781141814b869a79e70cc71281b81045ec1fc72856e34f7115025e57d6b4faa9c58040fb862089e9e3f2634c34b6850178c6","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX3+aQdw3eZ/jkfJvkDIghmIQaFLa:AT+Z2fun+dwMkfRmmd5","tlshash":"7563c7cab6c275399bcb6074507f018ab27e9da71448c478e62ac4f6383891d947bf7c","size":68294,"data":"","first_seen":"2026-09-22T23:35:46.182432Z","last_seen":"2026-09-27T07:49:34.367769Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbett.co.uk/css/style.css","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.141Z","timestamp":1790476914141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 12:55:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLdhCOD2p%2BHIleRh2zoAzB2RNuS5RCU6xRWj3VS3%2FsmLMRA%2FCT36iPdayqozwf1smFCCBJneZeoIO%2FJRKwLcUln7iAMVtEgC40%2BqrVm8spbclqwCmkOXO58SDEQkkqZB5Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a58d4b0-c2cb\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9695756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49867,"size_decoded":13134,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4985a4171d7dbf8b0c8281335588b8c7","sha1":"b32f893e6ff46e4ceef1b04db2841ce76a78d6cd","sha256":"d7b76269da88453de541df485d21a17b78582c3985548a16fc6b42724d9fcb7a","sha512":"15ccc8a9d4f37d65b2be203d88a22020d3ca82e50fb1cd2d59f3cd34114ef7047628ddf09171cd3cad69d0fce51b36114701c5e092f7ad9890d058a9159ec523","ssdeep":"384:iJnb1kjoDitd+0nwOcwZLbT3iYDLdNSRTKlnp4:iJb52HzsYjiY/dNsmn4","tlshash":"872334527663d4d5a917b1785fead625335ca043858afe6b3eec214c8f893e8c052fc8","first_seen":"2026-09-27T02:39:28.474298Z","last_seen":"2026-09-27T02:42:28.315074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-1.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.155Z","timestamp":1790476914155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-1.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57lE%2BA5e4AM8e08IZReG%2FZmHEkZu4Cuy1cTyDIpIRlDIs4thcW9%2B73Iv06JkNDf4VIwXB1Iw7%2B5bUpghY91Ovxc3X7%2BKs3gfzZfd8fBwUhmZiuC74m3HLMVBUsu1RRRMEA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a25918a-615e\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9795c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24926,"size_decoded":25662,"mime_type":"image/png","magic":"PNG image data, 279 x 182, 8-bit colormap, non-interlaced","md5":"712a4451e013ddb0432256f8d9bd5f5b","sha1":"356f83ab0caf06f944b1f30b85da1982f3ae9798","sha256":"c8c7252e96cdd5c0afbae437354459f644d805dd9c01913d41e607d3865ec2d1","sha512":"181db22b307e21586d1ec9d27c4f8c897162e019affbcb6608eb43f802509bc0bbad7f821e6c5780e586157bbee77bbccd6f6bfdc1e54970154772007ff32bc6","ssdeep":"768:162tuKESCPG25bBPlYktbnQskAb5UUkIQ3Wwk/yqLZsXRL:k2taVPlykZQ45HMGR/dsBL","tlshash":"36b2e084f9b6e44c7588a6bf398dcd17d9bfce42a130c3e5eaf8498ac68d7441302316","first_seen":"2026-09-27T02:39:28.47975Z","last_seen":"2026-09-27T02:42:28.315747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-2.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.157Z","timestamp":1790476914157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-2.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEaNrFoEFY1%2B4R3k3bm2mFUpK7Pi6898Pyhhr4m7RfrWh3d3mLPfClBDOhVx7%2B69AFgmgNbl8OYgD44I%2Fh39cMoGHhij%2BvwNqgUKKlv%2BIhRFI3q0mEjzRfuLSicbK8IGbw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259195-6539\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9795d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25913,"size_decoded":26645,"mime_type":"image/png","magic":"PNG image data, 278 x 185, 8-bit colormap, non-interlaced","md5":"87aab7573a593da427baa1d6415849ee","sha1":"ab1eb77424ebd42f0b9a5e5c94ef53d8ef9edde8","sha256":"3e5c1aad5fe49c774692cf5ce1b9e75c959b53ee97be4eff985c7702b789d928","sha512":"54ebbc72e6b8c8ca19aac252b189c1296cb4c99f0e45639ce4088efa591bb845f7510f0474842c983305b41dd056a84047cd1e35ae8b2786ef47f48eefe61787","ssdeep":"768:r1/KfV7oayIUms+mxhezw1ZslFlPWyoBx:5sB3sVho6Zs5P0Bx","tlshash":"f8c2e1efbd4107196b176ab3d497346e38c2555968f2cb2e24a193a11730a837f9cce1","first_seen":"2026-09-27T02:39:28.490263Z","last_seen":"2026-09-27T02:42:28.316703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-6.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.162Z","timestamp":1790476914162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-6.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZHesZo1xOcIDE91Su9vS42923Nhl%2BQIgjLty3%2FAOJLnTIsP1sHlSEtNsq8KbLdOZWGKnvxbk0YrqX68OaES5qFvcUXmzOpx99wYY4pm8aU2wrwLhMDjnIq%2FEsaGGITeAg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a25918a-70b6\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28854,"size_decoded":29586,"mime_type":"image/png","magic":"PNG image data, 278 x 185, 8-bit colormap, non-interlaced","md5":"109255ffb9a667124334cc56f8317036","sha1":"883e43e6b3d8a8632efd786bd795f77ddbeef6cb","sha256":"13bc3dada3814d96d95275805605ce630db60b9f0896ccad11b155a6e1bd48d6","sha512":"018e400aa6f9dfeca0bc1fd82b9f060e46abf84aaf4d7860d38e32326c1b605e35169029c8f87c0a53d8adab32db4b5b851c40931e5bcf9ff796bd6030aa38c5","ssdeep":"768:QMSg0RbBYng8uEsAG+9Y63NVYpzxmFt+g2cPxF:kvYngpEsCDjy+twcpF","tlshash":"ecd2e19d4dd181e7b16cb62ea47dac35b034c382eb0408e4979f70bbe8a2d947f52917","first_seen":"2026-09-27T02:39:28.481825Z","last_seen":"2026-09-27T02:42:28.317348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/dmca.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.168Z","timestamp":1790476914168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/dmca.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Mar 2026 12:25:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jyU2NTaIfvs00Vjyg5M3cw7nyFWg6RqETRugv3rDGDFI7GZ%2BkEonDL7OiXSALAGG5x5OnvBGGFSZzrZExWWjXk0nPfBb6FLoVCS70gxpkb3ZYcZHJ0eAX7ZpRHwt444iw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69b00dd6-41d\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1053,"size_decoded":1777,"mime_type":"image/png","magic":"PNG image data, 100 x 20, 8-bit colormap, non-interlaced","md5":"5c1e61adc27e3079cc008e391d444cfc","sha1":"34c83cfce336cbd3fc0bc6acbcbe7a21c1fc062a","sha256":"4b5f9e94dd33f7595f220fd85fbfd6eb880909ff18b705380e4d50502ed0987a","sha512":"c6cbc68d3bf9d056e61f14ed7c8af9fb16c9f077305969fb874b9912f85caab7ee033ad2e7c8f73481875dd3aae1bfc2904df7d6e01d3f9c73d447487faa449d","ssdeep":"","tlshash":"e111d8c34a36048fc14770418a60591272f9d3ea4f3ede44423bf7b28c66511ce782b9","first_seen":"2026-05-02T07:31:05.123265Z","last_seen":"2026-09-27T02:42:28.317972Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/favicon.webp","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.523Z","timestamp":1790476914523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/favicon.webp HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nCookie: _pk_id.706.4eca=acafeec0fad2d697.1790476914.; _pk_ses.706.4eca=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 15:34:07 GMT\r\npriority: u=6,i=?0\r\netag: \"6a26e0ef-424\"\r\naccept-ranges: bytes\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31XOhrvJ67iCUhfaPNZm%2FMrP5k1jN8SyEwKJ%2FHtTNfWHkdXOOH9GWc%2B8Qj6aL%2B%2BAjykvJ2qXL6rVNbpJmJnZvP3a2eTEUhG4Aa3%2FXnQNR6XIgYewqSYx9iSD4iybjcCiHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726ebc97c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1060,"size_decoded":1768,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b851800a131cf7e5adc471047ba4892","sha1":"98e4dab95f31ce9011f0c4d28ff7d6c2d6931141","sha256":"a61467fb89b953336d6b990e00dde6ed68f168b5afdf43c05db129a424f6c9e0","sha512":"aac7fd93538c1e274a484361de6209b9dfd5bdfe8478d4d4e0ca72eb09865b3c65c3ea91968c8758d07f1a3918d118f2b63761942b78a13608ac312268eec661","ssdeep":"","tlshash":"5e11b5aca94890131828af57eceaad8d1e8938a420b12fa72043420dc48c29c3332f95","first_seen":"2026-09-27T02:39:28.478151Z","last_seen":"2026-09-27T02:42:28.318656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-10.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.166Z","timestamp":1790476914166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-10.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BiVC8F%2Fv5PBt9Se8MR9guZCn%2F8LujOQ0FMGWMz316SN3E6iO%2Bslqcbfm2ea5DB%2BgPJ3rxHGetOmgCTfuT%2BWbHutcfuoAzCp3L%2B7IsFqx9FBfEEx1sGGqI28UqH4WcXU3A%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259195-5b07\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896556c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23303,"size_decoded":24043,"mime_type":"image/png","magic":"PNG image data, 277 x 185, 8-bit colormap, non-interlaced","md5":"fd39b2a42045d7957fc9c431a7e55164","sha1":"f138676dbfee5ebeb902cb4378d596f934f4221b","sha256":"521b7982702463cdee8d6494bdc61406f7b48d621876456d2160acccd4e89141","sha512":"3aa5255cc91770fe22c5baa51324744d2c7a4fd667e02e9ca2f9c5664ff752de4b5a29266b73f70086c700c1220dc91ea2b65cc2625b7ddbb43ebb6af9fc2a94","ssdeep":"384:P611Mno+xdf7+H5BiO3Rmoxakf1DP4pINDQNwWT21R0tENwKT1BN:P61Iou7+77Jxakfl9NM+WyQvKT13","tlshash":"74a2e1737416a7688726cc32a082b424ebcd5ccfb5caa54dc413d6150c25fdf1b9abe5","first_seen":"2026-09-27T02:39:28.4871Z","last_seen":"2026-09-27T02:42:28.333223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.355Z","timestamp":1790476914355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 470798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-27T13:43:27.8694Z","times_seen":298916,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":36,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:41:53.516Z","timestamp":1790476913516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOOQZdK6kHTIHDEOsi4JPRHnJ8Q0vOp1sa6R8u7%2ByoN9av%2F4R4wyStyvbAulESWVgu9oxdO3spnGYjs07ShC7oSoTyD3Izg8m6UP2RZ%2FUNVTS%2F9LsmS2CM7oEdwZ0Zabmg%3D%3D\"}]}\r\npriority: u=0,i\r\nx-powered-by: PHP/8.1.2-1ubuntu2.26\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a41726e5a94556c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28341,"size_decoded":7625,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1157)","md5":"e4200099173c73aed8cc56588e84bb2a","sha1":"edaace106d2d4e30261b5b560bee9b3ab08475c5","sha256":"eaaa3fbee99064a8a3b8ce49a33e1593cfb13abc295a53d8cd677207ceacb80f","sha512":"37e1cf666a0f0a43f736fe7359a630b9953bca17d11a77d8e42b7173dc7a18f1a0182806601615a416b739417304da704e1e37f890359d1f390036d31ef13b36","ssdeep":"384:jxUQU1GNFDzRuu8g+0bv9Z/QzYQzwJJGxvnNZ2wOAac20KX4:jxUQU1GNFDzRuu8gPb7JJInj7zx2K","tlshash":"8dd2521390f0467302c372f1bd917f2eafa94007c91ab91376bd459a6f99e1ac833a4d","first_seen":"2026-09-27T02:42:28.354335Z","last_seen":"2026-09-27T02:42:28.354335Z","times_seen":1,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":6,"connect":23,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-4.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.159Z","timestamp":1790476914159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-4.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUeVhrpnp7sIiC7TPM6ZyIbYvqrnSuzqgrfYG%2FZ4caJuQtfzaifK%2FeImm31c4AE3HPqAwZ%2FovYhm%2BNsQPC1IzDtt9m1as0PSHe4PvWCOgDcOVVkuMICiHSBScwWRLA1wYg%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a25919e-6b6f\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9895f56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27503,"size_decoded":28237,"mime_type":"image/png","magic":"PNG image data, 279 x 179, 8-bit colormap, non-interlaced","md5":"007048cabafe79d0190802b78c1ab6e1","sha1":"bd806221213d6987d6f5b6c7e8439a44a28801b9","sha256":"ce080e777121f090a38c13aba3215132bbdb1837bdda691dd61e443fb7c371a5","sha512":"01c69cb343a865bc1bb98b8c800c6d69186a80312fbca8ca61723c4762673a00637d9d6acef7bec45ccc073fb329abd3eca0cb3d23e923f1bd9bce601d0213f8","ssdeep":"384:5yR+aKVmtc3Pd/hR7oNmKCiK3G+ZI1Xov5LiNVy/HxReqnbi+zCzS/kkbgVZrpql:kWJBbQQG4IZ6xXhzCW1gVFpqtb5FeiBV","tlshash":"57c2e1d6b5bdc9494dd822b59aeaf5066b7ebcd55c85cb1c0a03ecccb4c8668f5d8003","first_seen":"2026-09-27T02:39:28.475569Z","last_seen":"2026-09-27T02:42:28.356167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/favicon.webp","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.382Z","timestamp":1790476914382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/favicon.webp HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 15:34:07 GMT\r\npriority: u=4,i\r\netag: \"6a26e0ef-424\"\r\naccept-ranges: bytes\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lkeRI4fuCaICFDym0ueca6K5RrKeD%2B3dlkSB8f5v0Bxh0CJatVBVPex5MVpBBupFFYpkAcD568QSEGSTyDjfSOPxR4G%2Bpbnnm%2Bq4odugf5AwjWpEK%2B0JXxqPhCRzl0jIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726eae97656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1060,"size_decoded":1761,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b851800a131cf7e5adc471047ba4892","sha1":"98e4dab95f31ce9011f0c4d28ff7d6c2d6931141","sha256":"a61467fb89b953336d6b990e00dde6ed68f168b5afdf43c05db129a424f6c9e0","sha512":"aac7fd93538c1e274a484361de6209b9dfd5bdfe8478d4d4e0ca72eb09865b3c65c3ea91968c8758d07f1a3918d118f2b63761942b78a13608ac312268eec661","ssdeep":"","tlshash":"5e11b5aca94890131828af57eceaad8d1e8938a420b12fa72043420dc48c29c3332f95","first_seen":"2026-09-27T02:39:28.478151Z","last_seen":"2026-09-27T02:42:28.318656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-7.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.163Z","timestamp":1790476914163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-7.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:42:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5PALghZVI1ZFB3DwrGdC649fCEAdI2DFcef6oG75E0NMbuqv4l9UWgk7C68KwdyfFfoEXo1hoBmMu1BOBGDOIcYBRCOBMB0arQ%2Bh26hw%2FLMkMxwCzbR%2B8u03xVZaCcyoQ%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259182-5d58\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896256c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23896,"size_decoded":24628,"mime_type":"image/png","magic":"PNG image data, 279 x 184, 8-bit colormap, non-interlaced","md5":"fa682d2d03cb5196199a747b147d7288","sha1":"c8bea5a5f07e5c1dda2841f7ae0900780314a7c7","sha256":"1e5e8d61bc825c268b125ffe76ff5bb71e2b0e30316e47796ae8bae09a719b39","sha512":"f36c280f269a93fa6471de6fecc23bdba439e7751243a56b62524a88f6ae463b77b229dbf4a2af4fa5761d9503ea0b0539527aab51e6ef58aeba2e8cd7f787f3","ssdeep":"384:5m6nxpHuLar2XBs/le7y5K8bH10zgdI6fDYa7zuWczw8nB0U0hZ1HtTgoUbay5nv:5dxhu+r2xsgW57bHA6BE1Wd8nVsjHtcB","tlshash":"70b2f1c597e0f5ee45009ae67a638fc52eba714cedb462dee7280024b09fa7073c5525","first_seen":"2026-09-27T02:39:28.488131Z","last_seen":"2026-09-27T02:42:28.357106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-8.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.164Z","timestamp":1790476914164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-8.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXa9Ya4TFr5%2BuQIXHw2SrHAw1cNKAZJYLo%2Bfop7FguOQVPZ1%2B7SCrC%2F6i0N1rsEPjHjhxLKiQ0uU0eCN3NFLRldhIt8210oTwp4wESaIkS3A5LJCQh586cE5YNbWHrFvaw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a25918a-6aeb\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896356c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27371,"size_decoded":28105,"mime_type":"image/png","magic":"PNG image data, 278 x 182, 8-bit colormap, non-interlaced","md5":"100cfc66ea70d334c6a3ea23ad1737ab","sha1":"2c05749d67564f4fc9d2ad3531916a516a1e8220","sha256":"f83c132c09862ab6051d7d930fa37be31cbe03ef03ed9224a1fe9171af5fe9b5","sha512":"0cbd4b5f825bcf8da467d9ca2f00bf2768b453e6971fb39bc22a92982a4f51564108f584258500e4ce1d6ba217b1ec903be0d303176f8381ceb21a9e0919af12","ssdeep":"768:VgWFdiPVehwpp2nBa8FY65JjPiK1HKKkNczLnA+UI:VgnPcda6fzwiXNf","tlshash":"2cc2f2f6967a24d7e4fd56ecf33155ac6e781a2366d6ca94f110000aa6831739d88ccf","first_seen":"2026-09-27T02:39:28.49131Z","last_seen":"2026-09-27T02:42:28.358058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.360Z","timestamp":1790476914360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 470798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-27T13:43:27.8694Z","times_seen":298916,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":58,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-9.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.165Z","timestamp":1790476914165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-9.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQiM9ts6MOBs9e1vSWNA8VbL%2BStmM4ysnfl1fJkGEAglzkp6Vszj7prwNNdcIld7Mqzq395F07Fx594lt73pfbLhwuAJEhZC4B4c44mFE9RuiTZ6G6QFXGwvpKhqFUIPxA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259195-71ae\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896456c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29102,"size_decoded":29830,"mime_type":"image/png","magic":"PNG image data, 279 x 181, 8-bit colormap, non-interlaced","md5":"15519f24b595043442c440c3d732bb49","sha1":"9946cf649e5adaf09e72957ddf8af6cc72da8dfc","sha256":"620de6fd1e6386dab8ca7851c8f24b131173f4166562c630420daf1b95899e21","sha512":"cef36688f375f5ef7221ad005659518429c8cad801ffd6d61c690012801d881bd06eb489d648311b1a6e819abb53cbc8c3ea51b826d37a6fbb397d57185b671e","ssdeep":"768:osYONVXRK/ZeHuyerF4FNlmr8xV8ZzzTWBwqfNVL:DYZ/YHuy0iXlm4x1JFVL","tlshash":"23d2f1f8f19f08a1aedda746d14eaadd82ffa1be35032f93327380b0068071546768d4","first_seen":"2026-09-27T02:39:28.485997Z","last_seen":"2026-09-27T02:42:28.358928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/js/main.js","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.142Z","timestamp":1790476914142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 12:55:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiyQ1h7J52iz868HhYlKg87AcCqyQyQG0%2FqxCFyRcnDKMHzJFACvXHxMzbqkB5lJaBI55r%2BhMYQ9u0npckl92UpVuuff%2FRczfy%2Bym7N2o5DO6WGYOkOjPzaSfRyu9UUDEw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a58d4b0-237a\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9695856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9082,"size_decoded":3151,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"6ed533eedd59083d1d1e1fb2531e40ef","sha1":"4a220b4cdd8357586161cae55ad31124032c8b4f","sha256":"43eb4500661fc9c8982449a9c265d90be8cd35dc3e5096092018f37d7440901d","sha512":"aa3cbd0b1b38bdcdda340acdf67c09b9369a3934c7dbb64518a30fbae52bb279c4a6f9b03842fcac4825b831086697ee6449020c9af4ed4e587886d8fec70ffa","ssdeep":"192:xOFrAUgCNNZpcJXY704c56kA6dsRfEMDymPQjDL9pDxZoYriDdQRDL9pDxZoPBA2:M3wrDxOYrK+rDxOPBf6DS35z","tlshash":"d6122419a1b75076007b72b75bc7124a7324146f7505fa5a7e2c8b0a3fc1a60caf1bdd","first_seen":"2026-09-27T02:39:28.492388Z","last_seen":"2026-09-27T02:42:28.359887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/matomo.php","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.143Z","timestamp":1790476914143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /matomo.php HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7LgdGkbiovneMyt3FU9EYmPoINQVpxZX8INrgL23nqprO84raTcBJvRsVIIHt64lqgD3jMWtxwYvXfyDXNP8CJs%2FMIggXpZCwNMZmmD6zPweyTNE11b7xzoSN1A47D9Ig%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/8.1.2-1ubuntu2.26\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Sun, 27 Sep 2026 02:41:54 GMT\r\ncache-control: max-age=604800\r\nexpires: Sun, 04 Oct 2026 02:41:54 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9695956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68294,"size_decoded":23052,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2969)","md5":"0c7867d79975e810e02b0f71ef426a64","sha1":"dd7bd7d0d060506a3fe67518b6fdbaa694129ecf","sha256":"cf75a64173bf9134e5013b1d6c5e00a63c5d5239cc952e3a0a99529facd0b344","sha512":"f2795a501c2b5efb454b82c3e440781141814b869a79e70cc71281b81045ec1fc72856e34f7115025e57d6b4faa9c58040fb862089e9e3f2634c34b6850178c6","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX3+aQdw3eZ/jkfJvkDIghmIQaFLa:AT+Z2fun+dwMkfRmmd5","tlshash":"7563c7cab6c275399bcb6074507f018ab27e9da71448c478e62ac4f6383891d947bf7c","first_seen":"2026-09-22T23:35:46.182432Z","last_seen":"2026-09-27T07:49:34.367769Z","times_seen":61,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/logo.webp","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.154Z","timestamp":1790476914154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/logo.webp HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 15:32:14 GMT\r\npriority: u=5,i\r\netag: \"6a26e07e-bee\"\r\naccept-ranges: bytes\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irY6%2B8sFq1Bi6GNy%2BB0pHOm9YUlpFIwNSpLWWG7kKEOM6Y%2FRgtE4szDDnf0vYZhlU1E4VNcQY1nUazCH%2FKnfFItAjMm5QUJ8rW4b35DibXJFV1JN%2F3XvbT3Q%2B7VLxIAoQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9795b56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3054\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3054,"size_decoded":3759,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66c8a04eeb00f45203e09df8d3d9b2d8","sha1":"612c408316e98d0bfbf6b48023d981e805421c4a","sha256":"b3166f42582b69501b942fa7f30cb376c38e8d7d7d5d673aa263260cde7e57b5","sha512":"54c57f6fbbb806a69f41fdbf3d0a54f7e32ced9cb73ea093958e542e26651fb0a274571a2c9591ea425faf6a67e1bb5d3e139d7c2920d323ce74f643bdacaa8d","ssdeep":"","tlshash":"25514b4bfed5746df9f0bdfc420a06616900c47a808c9931f35b74234570ced48648a5","first_seen":"2026-09-27T02:39:28.48507Z","last_seen":"2026-09-27T02:42:28.361743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-3.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.158Z","timestamp":1790476914158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-3.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:42:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUA3QsnruV3gNX883ZOfn9d%2BpQ9luO69UDYLfuAxBiR46dhWYOgndS7LBz5WBPK7LesjpybhbQ%2FHSJHUbVmPLpsROCgBP1OG6bvtS1Au5OmMVLd6RUZ2bC%2B5OT%2BWgCWZSw%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259182-810a\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9795e56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33034,"size_decoded":33773,"mime_type":"image/png","magic":"PNG image data, 279 x 181, 8-bit colormap, non-interlaced","md5":"437ccf4fa907581e58c18f53a2ca0e59","sha1":"e92a7ba1ac0636318022a25405eae1dae0b169bb","sha256":"3b74f712b6bc456da569af31311f99ba9b3e3021679a5ac79443c7d440767540","sha512":"623d636052cb38f25b3cbfd2670a694ca614e88677d2dc80481869fff4339aef91aa9b4691d7ba872f6c64ecdac358c725ff6d200d898e9e5701f325c890a244","ssdeep":"768:kO3MFLQEXvXp9qRc7ZmY0FI2MBgIUxqXQSWI93PB5cWRgWZ:+UE/XrZ90GfO1UB5r","tlshash":"d9e2f1f39f07c3b6e5141a76e380eaa22c77fc2878645c9874d841fda811c6935aec2d","first_seen":"2026-09-27T02:39:28.480769Z","last_seen":"2026-09-27T02:42:28.363097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/game-5.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.160Z","timestamp":1790476914160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/game-5.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Jun 2026 15:43:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrI0FW7Kf1fU49wO3PpiTpOpDLx2OI%2BBRfFmaOjg%2FtNwlh7ShZeX5DQwf2jSPsN5O7nNQxLhbXrqbHQos9QNeR%2FMFcs4%2F3fjKe5QGn9Ba3xejci2tnmorLNUID6PxEg3gA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6a259195-62db\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25307,"size_decoded":26041,"mime_type":"image/png","magic":"PNG image data, 277 x 183, 8-bit colormap, non-interlaced","md5":"00c72ba034c0df776aba396d210b87a0","sha1":"ee398db2f282b4ec4b9d28fc262f87994300feed","sha256":"f4b8a10d578f9d78743ce53f426703dfe584216a0916229d78f6ee8ceb22313e","sha512":"edb1cf63867fdc4ceb7ca71672f316a1a93e6da23717fd0965e1d27fd2922e829b53154931d24d1c79c0140a48e6ab77bb121150a31166fdacec6eb32f1cb08b","ssdeep":"384:9tcPxja5ME8JMixMD3OAvWKl4Cjd0GjppMr8HDBZIDXR4+46MJS8ckCqdpw:nD6Mix8OA7uCjydr8HkDDYO5","tlshash":"8eb2f1a5c2713688ba96183dfa8047725c1f9b9f2f01c0bf453ef160af9268cf661e45","first_seen":"2026-08-15T18:23:57.068697Z","last_seen":"2026-09-27T02:42:28.366125Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/hero_bg.webp","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.315Z","timestamp":1790476914315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/hero_bg.webp HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 15:34:35 GMT\r\npriority: u=4,i\r\netag: \"6a26e10b-9a10\"\r\naccept-ranges: bytes\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPRq5yoYih9dAGwxlS3%2BmY%2FTOAislHXqEk9uWHDeFAxZy4D9EV0%2Bw%2BPK1uDY0WoG1D23sLgdmp05y6sQaY0WUiuAw6XumNIXEUrm2p1G7Slwtm4%2Fr0%2BZ67KDmXEI1bKe8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726ea797156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39440,"size_decoded":40147,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82154cf3827ea8984e40fd7c0332d583","sha1":"addd465f8964a69a21a22af26808f470480d7d74","sha256":"3e078f8cfe2c397cbfe419ffb7b0d4dd301da40724ec6857e76afeee1e96380f","sha512":"70bc2641cd4c920fdab2722a29bb5ed05ecfc2d10c2035fdd4dbba3f008d7d6ca3518bb27debd6552e9a770e0c2e88205da21531b23efdf76ae9b021d50c6d9f","ssdeep":"768:3LAmA23rGaU4Gez/84f+eXAareCzRBkPeEFPtxGNbFZ3vYoB/f:3LAp23rGaU9084hTTzRBN6/GNb/fYa","tlshash":"8c03f1a66f10b1305901824f9d96dc42b229f3d175af3eb683fca891cef91024395a9f","first_seen":"2026-09-27T02:39:28.494487Z","last_seen":"2026-09-27T02:42:28.366981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.147Z","timestamp":1790476914147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 29 Sep 2026 02:41:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pisTeXWGAH4VYV2wQcPsQg00%2FKe5crCLj91EAT2qOgKQMhB8GWAk8ypgip%2BhNSS4iCV9tewII%2F07UJSgmzLF1ob12%2BMkahRJg62nNtqKIcGeMqyv9TYq9eBLCFR4oGQcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\nserver: cloudflare\r\ncf-ray: a41726e9695a56c4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T13:46:14.146458Z","times_seen":440241,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/images/begambleaware.png","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.167Z","timestamp":1790476914167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"GET /images/begambleaware.png HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Mar 2026 16:44:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4XpowY8cXH4MnCnlik7utJUt1wSJ%2FtSBVbTi9iCYDkUGnEQEC%2BWVH%2BFfS5VEETdLRWFa8W%2F9zl9v3imKJndPU8REW7Wnw71W2AahaLAINLJZ6yFrPPggJfT3Yc3sqy3zA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"69b04a5b-77d\"\r\ncontent-encoding: gzip\r\nage: 184\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e9896656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1917,"size_decoded":2518,"mime_type":"image/png","magic":"PNG image data, 244 x 70, 8-bit colormap, non-interlaced","md5":"d2e7445e7a315e2e760b11d333ee969d","sha1":"c4fd9a183d6ba7a751e70923db9746d0982bbd62","sha256":"4b8b30f62958e3d18dd13226dcde3d6d848e116debf9bd4baef247d31301d116","sha512":"a8a99d3dc796fb6bd737443565aafc2cc144f6fa4f4ca8d9c5f68bf46e1f6d22319213196f297f65693350783c8bcecc71ae66e89579aa03c465401d8d621849","ssdeep":"","tlshash":"1b41c78798c867532730d9190af005bbf85a6cbfc1a94477d68471a1417d783fdb8942","first_seen":"2026-05-02T07:31:05.178661Z","last_seen":"2026-09-27T02:42:28.368391Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.353Z","timestamp":1790476914353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 470798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-27T13:43:27.8694Z","times_seen":298916,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":2,"connect":44,"send":0,"wait":31,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.358Z","timestamp":1790476914358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 470798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-27T13:43:27.8694Z","times_seen":298916,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":47,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.co.uk/matomo.php?action_name=Rainbet%20Casino%20UK%20%7C%20Login%2C%20Bonus%20and%20Free%20Spins\u0026idsite=706\u0026rec=1\u0026r=434470\u0026h=2\u0026m=41\u0026s=54\u0026url=https%3A%2F%2Frainbett.co.uk%2F\u0026_id=acafeec0fad2d697\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=gBdUL4\u0026pf_net=42\u0026pf_srv=206\u0026pf_tfr=1\u0026pf_dm1=431\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"rainbett.co.uk","domain":"rainbett.co.uk","tld":"co.uk"},"ip":{"addr":"104.21.7.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.406Z","timestamp":1790476914406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.co.uk","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 10:31:52 GMT","end":"Wed, 23 Dec 2026 10:31:51 GMT"},"fingerprint":{"sha1":"97:A8:81:74:61:74:5D:10:42:78:5D:DF:14:13:F1:B6:90:0F:DD:E1","sha256":"84:49:A5:B2:60:F7:27:95:C4:5D:E3:29:EB:1D:A4:2D:4A:73:5A:A4:0E:6F:7B:C6:5C:C0:BB:FE:B8:43:93:19"}}},"request":{"raw":"POST /matomo.php?action_name=Rainbet%20Casino%20UK%20%7C%20Login%2C%20Bonus%20and%20Free%20Spins\u0026idsite=706\u0026rec=1\u0026r=434470\u0026h=2\u0026m=41\u0026s=54\u0026url=https%3A%2F%2Frainbett.co.uk%2F\u0026_id=acafeec0fad2d697\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=gBdUL4\u0026pf_net=42\u0026pf_srv=206\u0026pf_tfr=1\u0026pf_dm1=431\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: rainbett.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://rainbett.co.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nCookie: _pk_id.706.4eca=acafeec0fad2d697.1790476914.; _pk_ses.706.4eca=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jK7V%2F%2FBfJoZuHMkwxLtjufq4mQ9prX4%2FJI3Jj6U3P1LBQePkkc%2BUxZ6G5KzP84u6p5arQdqwk1MWoCJP%2BnWhsGj%2Bftsh5V2mrkiK1qiWflSFyI8vvQT%2FiKwxBqfZwuyjw%3D%3D\"}]}\r\nx-powered-by: PHP/8.1.2-1ubuntu2.26\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726eb097756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":635,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T13:46:45.185155Z","times_seen":18688833,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbett.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.co.uk/","date":"2026-09-27T02:41:54.139Z","timestamp":1790476914139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.co.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 02:41:54 GMT\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-27T13:55:53.697196Z","times_seen":47462,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":48,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}