{"report_id":"7912fe36-f101-4c48-a3dd-756bd0619ad3","version":0,"status":"done","tags":[],"date":"2026-07-08T11:59:36Z","url":{"schema":"https","addr":"rainbet-fi.eu.com","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.23.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-fi.eu.com/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"title":"Rainbet Suomi Casino | Online-kolikkopelit, livepelit \u0026 bonukset","dom":{"size":139187,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1942)","md5":"61ec8c8a821cade980f78afa4eaf4bef","sha1":"08afadd7ff34e9c06eaa7877646eb2ed726cb10a","sha256":"a790aa4c0c212db02c9709b3ffa47e36fba389e9a41d5e061c40e062d2f9bb56","sha512":"1355ac835dcb7fad898c67f895fb86901ac39472a7b63b8b2ed494bdf8c07c26fa894f2c9cb56febb6fef7906d1364498d92bad2fc0916ef65f5a21d50c5a1ba","ssdeep":"1536:iPrvEAt2OrHz4r1j55FRiIBlOz8V6M871ubW1mTicSES/W8:sEAXcLPgf1IO","tlshash":"99d3d7a912f18677548382ca2e711b1a3ec0e753c9560a50fbee8fd50fd6c95bc2361e","dom_hash":"domhasheedb41a3ca271737a9c3e32c832a7253","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet-fi.eu.com","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.23.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:59:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-fi.eu.com","ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-07-08T11:59:39.002103Z","last_seen":"2026-07-08T11:59:39.002104Z","alert_count":131,"request_count":131,"received_data":4945497,"sent_data":74124,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/app.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-12T15:18:43.688768Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04e08311353fd7693e9398c003b6acc8","sha1":"d1c4b58b0821878867812fe2e6104f56862ce178","sha256":"73424f8e7aa25c9b4ff65b0f0f56dbe833175d88b05967315bff469ab35e50c4","sha512":"bddfa545bc0132928dd741a84ca2b5fca87dd1f1c749d0162e34f2c00a9047b50b24418a62263f26fe99bd5310e443ae2a0ee120e67ad317a5a1e2b832cbecdd","ssdeep":"","tlshash":"0f8000c800030a02a00a22ce28c330800c80000c33228ab002afe208820e08c80c2820","size":27,"data":"","first_seen":"2026-07-08T11:59:44.517634Z","last_seen":"2026-07-08T11:59:44.517634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T00:29:31.650269Z","times_seen":395226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/runtime.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-12T15:18:43.827191Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-fi.eu.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"fi-FI","filename":"https://rainbet-fi.eu.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"fi-FI","filename":"https://rainbet-fi.eu.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"fi-FI","filename":"https://rainbet-fi.eu.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:15.785Z","timestamp":1783511955785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:16 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Q7IW0PfEShB011gsx9aq9o4nFHkoSDKU26LevCBhYK39vW%2BpnSN2coL9xhdiZteoZ6oRhapM55wLZolNn32qB3gu6rfkSHNNZiYRhgwp87h5aNVl5vU%2BO96mHPyRCOIudqJww%3D%3D\"}]}\r\ncf-ray: a17eebfbaf7e569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"bc5b0a6c4af44d345e4c0e4342360bda","sha1":"6d6413d972c1f7f2d5c5eb3c9cb653b6a7354044","sha256":"b575e0faa4ff77e8999d278ce7d7b9f830b5de1241d9b018942c9519fa133ceb","sha512":"0bd401c14c5e71928ce4b3615cda2bc634c3a9dccfe7a8d51466f28b8ffd536046c33bbf07d62a53903f22051a6906ba809f9ced1f3dca22d72a3657e0d056d4","ssdeep":"","tlshash":"7bb0128dc03414161a63e8207dcf339d60e20f0340d40b1093c0988514f41052103c50","first_seen":"2026-07-08T11:59:44.358997Z","last_seen":"2026-07-08T11:59:44.358997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/glitz.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.164Z","timestamp":1783511964164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/glitz.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/glitz.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj85pvxznui\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmZ7OTuvV4HI%2FOCwzWQiPDBmj083AbsQkssb9L7zCAsHZ%2FJ9HdGgBB%2FvPeqFcqSRzuwTRQYs4VBSPrpGxztU4fBP2a2Wscq2lru9E2QMLg9oEQV%2Bp4%2BCaGrJvw%2BJD8khAkk0FQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3d569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30906,"size_decoded":31922,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"399c319670e4996a2151411ef390e5a7","sha1":"b788c1f5209a961a6e8e0fb5afe3a3a258629dab","sha256":"d131f14aca1957d7ff4cee665ac4bb49d0a595c44272dd0f6518d8a1725d3c85","sha512":"595ca46110c491309d9f5b757e80cb6aede79da3e0ba7e4ce9f309dcda1bef0715978480183e05032424cd6ec49a008df9aae0d82e22a95c26c0bc99af0ddb4f","ssdeep":"768:DPlHUJ1BK0oOJhFUI8WtrddYCpWPGzgcMfIVje:DPlUBK0oOJhKI8Odzzfkmy","tlshash":"5ad2f1bea5b40198e30f0739abfc39b16e5215f1f829077a7ee459463779c102aca224","first_seen":"2026-01-03T05:05:42.408288Z","last_seen":"2026-07-08T11:59:44.360573Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.238Z","timestamp":1783511949238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 11:59:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dg1qma%2B%2FvpnYZoX2tOX4IfAdVhRDn%2BF82lDH1EwruGhey5xoqVKBnDunPZSj2XbHcsFC1Pskwoh1ulY6rH7ioGJK%2FYM5URjKU3h268lkiRWpKh2dCL0xgLkdqW1XbmanCI7Shw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nserver: cloudflare\r\ncf-ray: a17eebd2bd4c569f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T00:29:31.650269Z","times_seen":395226,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/bonus-deuces-wild-5-hand.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:20.076Z","timestamp":1783511960076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/bonus-deuces-wild-5-hand.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/bonus-deuces-wild-5-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:20 GMT\r\netag: \"dh52kj56jvhqerf\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P462MELBJjhjY923Jabo0%2FuyejyVDHBIxoGhmR6CeWTJR0PJ3Tw3NUI%2FGYyLVZjycJQNjlautuN3uRkjx03WDqrOG7oJvL%2BwXk6jOblUEW%2FiE5lsIN7EVrM4FSF4VyYoV9HYGg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec16793e569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19131,"size_decoded":20162,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"89d901972c91daf64ac86e8102a0325c","sha1":"77ad295999bc343d2d9b1a133fd4d047a9a4a970","sha256":"0e7d6031ffb4de9bfb0d3514fa230a9dd14db92296fdba402c8754f88d070014","sha512":"7e169b7a5acce3d5912980caa5ece1f8b1ae9a2247138ec70bf05c2d1ea72acbfd46e888f53c865dfb9f5a9ae3d36d72877e317241574e686b1a1b18c6b565bb","ssdeep":"384:tF3CIYoYftYP0OjIia5od2aXgVD/4fLDw+FP4:tF3c9AMD/4fAIP4","tlshash":"ec82c064b6e19d52c10c76b053fa77633710d09f75c8129b5981cf3ada8475208eaea8","first_seen":"2026-06-30T02:37:58.745992Z","last_seen":"2026-07-08T11:59:44.362219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/wild-stars.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.265Z","timestamp":1783511949265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/wild-stars.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/wild-stars.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjfrl93ifnq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2F0uXfDQ36dAVhpItt6yntW411Kdx922Tz9WtHXiXzjrX1eEpCt3WekJLqh6u0lyj8i%2F7qnrq9VKI2ephU%2FkKILLh1ghit4AtITezjFk8eyzZszWo3hp6CLWKEOZjGLLj5bSSA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed5c569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20294,"size_decoded":21309,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ba65de0f823f480b5899e6f2df768e9d","sha1":"aada5f64797d9ef749d7d6d6701b1727ba12eee5","sha256":"1a99b565357d5d28567ba75e8d83ea9be404f4c8aa589adabbc175ad03f77af9","sha512":"548e1656885a7b9010f9a2156dde10422845a71c49e3dbc9080cc52d1d3e5bc7927ee305a98705dee59fbe60906d959225938697b46e7de185b570188038193c","ssdeep":"384:wFgtr/zrx2hJl8zMNOIA9Rl6fybAHUWD6eoq9isHe10u7VWQkIiZ9s2kSrOZRPgL:wFWnx2hKPIA9RSybAHtGi9i2cjViZ22l","tlshash":"7392d15566bf8910ea4fb3794d82fdb3f3d8ee80a6ea69445070053cff047c882da1a0","first_seen":"2026-02-01T01:43:13.967235Z","last_seen":"2026-07-08T11:59:44.363618Z","times_seen":3,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/previous-arrow.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.281Z","timestamp":1783511949281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2DDanS3RYbCfe7qr2w2%2BTcpumQMm%2BItwIliY9gwbrPsAUwNM%2BzsDCgyiFLCsNVYIImz3%2FFf8BFBOyO7MMC1zVo8uSe5MCWDxDb6rsFl2tSXtDh7mxxhVu20SvybQ6%2FGt%2BhQGw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kl0iwowc6n\"\r\ncf-ray: a17eebd30d6a569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-12T15:18:43.469123Z","times_seen":76,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/microwave.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.300Z","timestamp":1783511949300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/microwave.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/microwave.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2stgqb4cw\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcArWfn%2FjDANJc%2BmVWd6OXTs2CjexDOVuHjAcsNA8lJVhNo1M4Dti%2BaR5uWCsCDTbQR0TC%2B7WlbyMyJ4NYoX%2BjvxGnxZU13oDnuJnWfUpHHVz%2FSMK9ywp%2BgmqgySr8nPhm7pjw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd32d75569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5648,"size_decoded":6674,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4c02b6844b34f3fd03da7202c99f786c","sha1":"b532bf13afeac6614996ada5cf5b6b641f0e3043","sha256":"29057973cce382ecc8fa1decf70651630c242c53c216f1a6cce2a86a033ba1f8","sha512":"3b26d5fb9482e09e6be295f700b056e7226626ae1a0737ca32178e14bad756d9bbc1984b744b67f89fb1b4cb77427ee26be39522a8009741566e7cf32a2ce4ed","ssdeep":"96:lMIhtoWI+3bFb2zbSnJeCrovpKfe+WpiLNpzB89liHOnneLZsqCDgr5VPdhvBCEl:JGWI+3b52zbLCExGrWYNplDhOMr5y4j","tlshash":"46c17c862adfd507fbbe4a76311da6526be1ac708a44072727c4b6542fdf4806c4ea83","first_seen":"2026-01-12T00:47:03.731007Z","last_seen":"2026-07-08T11:59:44.365256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/banner-square-69b94e97cfef16.09864044.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.634Z","timestamp":1783511949634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b94e97cfef16.09864044.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/banner-square-69b94e97cfef16.09864044.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklc2e84\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nMDegCP4hVhFmeWiGnFXLkURivAPhUfj8LSf8UkBgPn8eIjYe6ATVR%2FSBQJv7XQmLGoDoC2cZshxagvSHKpKXHt3U8v99uduzX%2FfauFRmDcL64%2BoWShtzC%2B8QMLQ5nORMPmvQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17eebd53da4569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111748,"size_decoded":112800,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"b9fb6a5b6879aaa98f4827a830950279","sha1":"c22d786f8005bc9cd60a6c807557dd0b85179c6d","sha256":"b805a6d3aad8b93099b18db74aed2db01a1c095d71637684a1b0c4723dcdf15e","sha512":"659b451b7c7fd5aa691b217d257ef9c6de70ad5ce5051e88446e2800a6337562f3890e44253f5fbb0aec2ae6961505271f723cd1305bd1ae4e64cef1d8df3a44","ssdeep":"3072:ZnSME6+zxDPCk4bEZvew5cv3aRIPI1T/EpNW:AM+tEEZv6foIPI1T/EW","tlshash":"d0b312face50083c482544a065e7b95ff92e0710792722dff61a6fe4dd118af7ae8191","first_seen":"2026-07-08T11:59:44.366494Z","last_seen":"2026-07-08T11:59:44.366494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:15.781Z","timestamp":1783511955781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2L2X%2F3SYDqQNA3BDLj3ZZz6IXTI8YgsQ9vLln2PSO1aoqUiWjsVvW1xPCHkcR2Ef00iE7JIeGJqyg0NhvBgeHQ2qGNjtQzvY9IXD4qsS9Us7vI6J3bFoK4vrUk41fZLTgM%2F5zw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52n8jo9b5f5z\"\r\ncf-ray: a17eebfbaf7d569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1174,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-12T15:18:43.61701Z","times_seen":100,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/kick-ass.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.269Z","timestamp":1783511957269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/kick-ass.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/kick-ass.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj9hck57ly5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjacGgh9uMb6DjB1hTcjLKNCIIu9TvJ4CP1HHNjFlPiNrOT6RsRPp0hWuNGoLLlvz3NVM6m%2BkHJm4DQ9TQpZu5gfPVm%2F03TaGXiR6iMKsJPUkeQ1Br9ssU1L4a7%2FBY%2F0NjjoyA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04fff2569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28445,"size_decoded":29460,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"563b62af89e49e0794a48e7cd8255f79","sha1":"f1498c4b7bb54e63a59488ce06d4f842f1aa9345","sha256":"fd6b641e1b85e865916165b325cc90f24ac30aebfab0d081d13121439a03b511","sha512":"11f86d097eda96a82846c573094c2f250f482b30391fc4155569d7a449a67b500a2ca4e3166bf6beff96c96bfdcf3fd0cf514ecea4bb73ef51a1b862fee2ffaa","ssdeep":"768:paTs+sXhIsZHokN9JkzWKTR5r1G6vIcUHY8dGfEyAJEl5QASrYS:pzPhnZlDJkzWKTDr1zIPdG8yMlAOh","tlshash":"c3d2f102762dd276bc0276b6c07b83e91513096674705e1b8c7ab8807f723997fe9376","first_seen":"2026-07-08T11:59:44.368663Z","last_seen":"2026-07-08T11:59:44.368663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/commando.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.118Z","timestamp":1783511964118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/commando.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/commando.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj22me7y3qc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBvrnsi3xCfBFDcYYxlfGEVXIvoy0ulKb6OLrE5i5Gj86gM4C6C4c%2Bj94T2JftwjLD49W2Yxf6lk8s5MCE8Jp9N3erhLvcn25eXvQ4dJzVTz5kRYlY6etLka0eYDtNrZ0eG1zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eec2fca33569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4836,"size_decoded":5847,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"c7d91d0924889796c28decf7764e80f0","sha1":"85811f0033e7701beb5922eba8df469b2d26a036","sha256":"6b265bc43c8907e9d702354c546266dc2f646fd4f375474229ed1d760245bd8d","sha512":"af29ceb8451044f441efea6e951af3ae517465d634384a7b869d24bc5e2e1a771dc503ed77e8c624581ef0917809c43049769e2e09bd3a368dfa5eded073137d","ssdeep":"96:0YSYEaeevw4M6f71L8eGiEZyBoAE4xgu8CjQWhWxFz4xrFil4TADZUZIslomCj:0MteeYViG9MBzEtBBRMusEj","tlshash":"c1a18d0e77afd327e64ec132172d635ac8723fd266460c12545fe7a4976b0a18970bb2","first_seen":"2026-06-02T03:08:17.667123Z","last_seen":"2026-07-08T11:59:44.369698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/well-of-wonders.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.264Z","timestamp":1783511949264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/well-of-wonders.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/well-of-wonders.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjewmprmn0f\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4yfxW6ozq0fIqAr0%2FlObT%2BaJ3C1zmY9EixKRCtraG1jZ0UjbP3JacdQQKorXVMuygJUVB6E%2BrsmkEUmBE5fqRv3gElfYnhsmEW8vuhOUzLA2dizB1ZHrLLGfkd5ugvi%2FT%2FMog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eebd2ed5b569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29823,"size_decoded":30847,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1b6c8b017392f718d5e38cf5ca663570","sha1":"b57de2143767f0b73b0d29b4a0be706b9ee7eb62","sha256":"7779871622f5abfc5b0f5ccae5e05b2bd0b1ddeb1f92715109845c12ce54c123","sha512":"9a7a1a2781494b950b890fbc8fa3524de529d2b6f561bd8313e67f969153d7ad69e6c694285a65d4c98e6fe77ca1ede7dc1d57218740080cb2139400083f358d","ssdeep":"768:8gJfE0rIYCmj3stXIEnrb7zpOABl9KGUrWSZKVCL:8gpELYCmCTzpOAuBKk","tlshash":"56d2e16b7f917922d0cd27f00175b2b4e2d8567cdb11812ee60a68e2473dd3347da2ad","first_seen":"2026-07-08T10:52:35.099826Z","last_seen":"2026-07-08T11:59:44.370202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/dmca.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.343Z","timestamp":1783511949343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzc1him6v2-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5scbp7VegLQZjIGlSqniMoJIyt4qLCNQ62Wrse4X7b0NtznmTiQ4CQtUPZInkx6EQNAyOuTh1W98PtYvkS97mp7EzOP5h8AaeDSx4bLZWoTtpfPkw4yfnD%2BZMjjsBmXhDDAKnA%3D%3D\"}]}\r\ncf-ray: a17eebd36d98569f-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8894,"size_decoded":4568,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-12T15:18:43.494394Z","times_seen":63,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/runtime.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.239Z","timestamp":1783511949239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5f1jl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1p52V2paCtHwgbpEsx6aRDAVeP6q%2BNgDzMpBu0CMjTK7lEQs%2BG0Oqtxpo9R1ZjxL0QUkLyFnqtjJ1Rj1el%2B51EGOJ7YxBYcjiL8oni2HaxVRphEYCG7m783nzWncSIdb53LhpQ%3D%3D\"}]}\r\ncf-ray: a17eebd2cd4d569f-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2001,"size_decoded":2065,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-12T15:18:43.827191Z","times_seen":100,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/amazon.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.301Z","timestamp":1783511949301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/amazon.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/amazon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj1qpq6549e\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2%2B86s8VdPVA9Ob0Rkuvwvzh%2BvklpsPRtxyqzLBaJGDMuLH70XI0cV9Q0X0TJ322h%2F%2BaAap0TaHRQKPrhrplTi%2FSorf9YVBx3OiPza4KDzBmpv4QptVDT%2F30EdXnk4dOLUj1hA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd32d76569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5522,"size_decoded":6541,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"0c1ebb5726440b943b98b57f52a3bbd8","sha1":"bbe1781836106ee9b138004ec8f03cfb15137ba0","sha256":"88369f910b0330f4873007facd794179343969fa49d6da22dc1da1b933d65b9b","sha512":"7519d45e1a5db0bb5674423bc78fd2a7aacf200c0e66bc488e27934e056e9a6bfdac37842dd2dd3b06ecf94ce11f066973d65ee9b5ca898ccd37ef7e168f1b80","ssdeep":"96:736aXUqdB2uTatDHgIg3sqwTMcWKQ700AZ8WTcWuq2Wh1o9xrtf:7KfKHTatDHg/sqwTOKHZ8WTcCh1i9tf","tlshash":"04b16c1bc794b508f95d5aba29acd21c324a4d2d3211be3734a4aa18b723ee01dc4379","first_seen":"2026-06-01T01:26:45.814927Z","last_seen":"2026-07-08T11:59:44.372563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/4.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.334Z","timestamp":1783511949334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1eemXsSj6H1uz1oSSI7sHjKmmHi1VWBNyP%2BznLYREYBcvRQ7m5K2VlHf0b8xJe9M55rlCmYyJ3RFjpUU55skcU0TLysWCNosr4LwPHL58%2FudUYP3TrH4A28Q4scatzXiBoSLA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkzj6oqxdb\"\r\ncf-ray: a17eebd35d90569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1267,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-12T15:18:43.905766Z","times_seen":49,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/10-burning-heart.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.160Z","timestamp":1783511964160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/10-burning-heart.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/10-burning-heart.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj3ux7aiaw4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MW5madWkWcCl0MU14wcuTbtDrwUrjXzuj5Pp4xDcIRAVpVDYZ8yTTKMkJqArRTYNcPF6R0UN7FG5dHJkPJ6g3c56FDmMemV3zScBFtaibIR0ZAB%2F67PVvhxpGF%2B%2FURF%2Bij67%2Bw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3a569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14116,"size_decoded":15141,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"747f882b8859bcbde71a666a4416a077","sha1":"635f7a4a98008aeeb276c4c141fd5bca02ed534b","sha256":"1eeeff1356ddbcc7604196d0ebf463b9ed6fa9376664337d2d520292b2e5e01b","sha512":"bb068d4a142e95d60f205802be0a087a09406f284b2b78256cd87aec72fbf49e06fe5df87ccad5626d2c47774eee7e7537043c53a5a9c0b76d90447b0420cae9","ssdeep":"384:fnubTRDUnKIUqd7EghI45bfbKUO6E7XJYLXEQ1H6N:fnuv6nKEdYghtf6d7XEXEQ1H6N","tlshash":"2552cf0896a16de7e0ef8478b8ca49227f408ee96d905d4a135b1af04b3aac257df070","first_seen":"2026-01-01T08:17:55.728889Z","last_seen":"2026-07-08T11:59:44.374472Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/african-spirit.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.257Z","timestamp":1783511957257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/african-spirit.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/african-spirit.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj46tvcboya\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhuZuqjvZDakBwnMA%2FVgnkzdViwlHi8n9N0TObV5IR588bGdGGzkTmg8xBiek8kClrFGL6l20DHwHZJrgBfah%2BFr%2FS16KsEXqKOD3y38R44zcH0ScRbIDqajyvWFnomqRmWYwA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04dfed569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32338,"size_decoded":33357,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f4de875d2c6a8216b64f1f6b5c84e8b2","sha1":"e83367f22e41237fb675226d9e464811d89a0bb9","sha256":"b7b7416ef578a136f4fd26829b8962c18464909241772bc6e5190558d8b9f825","sha512":"7e74cce1f36f79fdf45c00b3ddb3738f4cab07a1f7f8e792a0bbccf6906b70c848732f581bc6c65ada5715e419d4cf721608500899cbca59dd88f9b036718b4e","ssdeep":"768:J1H7BU08DZzjPM+ou+AiNn6lXW9MqXLNfciLXWj:JT+ZzzM+o7TuG9BXHXC","tlshash":"72e2e14cc0120d77f4ed3763d6e63a46a217cb37b896d809748bb3389f15a617ca901b","first_seen":"2026-07-08T11:59:44.376114Z","last_seen":"2026-07-08T14:48:57.703183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/5-reel-fire.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.161Z","timestamp":1783511964161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/5-reel-fire.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/5-reel-fire.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj3zoo41q0w\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbzCKDEZLTHIeDtuvthLhfSaJD%2BsU1lpbANIcYt%2Bnb8ZQmMpso82PqOSTTavl3eASqj8BmNiCVIupgKPOfpE1%2B5LWPTOBVVIq9YIStCLMFms%2BEA0Bs35TkOrBK9yqZZaSHq9Qg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3b569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33728,"size_decoded":34746,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"89f39e6553fb5b1d194730b2e6c48009","sha1":"63e94dfc6df701f1ff184b5ee4dbb9c8d2fe15a4","sha256":"b34ab237b6a7f3da1b6e14b558ef183f819a54c43130e8cfd29d612114d3ea74","sha512":"ddb870c65cb64fa268245480b921c239c82cf0680cbd1a8f70ad7f8d11a703ec7a74db0a899a8f5e601f82492aab6f60712d1603c5074d897d1b7146fcfdef6f","ssdeep":"768:aIDQ2Vs+uls6ql3LhD0Jvp2BXL92qWFIgaymmvk:rfsLvK3LhYpp2t9NW9mmvk","tlshash":"8de2f115bee45a56fd4b332d3cb48760c5c4e520a061a8ab98b63d140fb793c5cad6e3","first_seen":"2026-02-14T15:47:19.022071Z","last_seen":"2026-07-08T11:59:44.377768Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/dragons-gift.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.162Z","timestamp":1783511964162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/dragons-gift.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/dragons-gift.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj6u37qrp6h\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pMNfLoPIVVfW09wu9SKcSwBsdADErn%2BYkVV4dZrCpZ4sfDI%2FrgoaOWFi6A7prXaxynNyTUfBt80KJrIOGdf2qkvoChHU83eDxlX9uB5gIQfGaRoLzIDGcsrvKjpvoEa65xyaw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3c569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32633,"size_decoded":33648,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"672c9fd50e7d572a158d8cc67d2b276b","sha1":"c949381a65bf71fbb8c32eb4398c5442223ec50d","sha256":"b2d78cdbd49eac103fba8a228c039221817e560f001289ed6fcb45f9c7ab5fcd","sha512":"6522f1fb3bf3504f7122d3da1802216c0e95d3e0a96309abbdf8320edc962f4a6ef52af50aa1055108faa6773d6c5479a1da3b5c028b2268da8f9a17060f2e5f","ssdeep":"384:+esMWVh2M6wBkDJz0Lk5KRFZ9aiwr0Yp0dFANXoFfSJXzv0dTMHhTFVt+Qv/KAoH:PYVhPBAJz0LBnaiof+Slv0mHhTF6m/k","tlshash":"c1e2e168b5523413ba1e0639a79fc643657ad2d7f35034e206a7e2633f19c40ab41cf7","first_seen":"2026-06-08T21:53:39.61014Z","last_seen":"2026-07-08T11:59:44.379195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/savanna-moon.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.261Z","timestamp":1783511949261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/savanna-moon.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/savanna-moon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjcgiklgnpz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w60So37mh2oObd%2BO%2BQI%2BwRUzY3HKhB0PKsNsuK2wPd1iCGVmQHi9tQcgtHypMTzateJz4lkClx4P7mC8enp%2BYWgTyJfeTviAwVKr4N2U9UUpgMh1GOFopJMvmW1E9xnjWUTjCQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed59569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30743,"size_decoded":31762,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ce9b5a089a443bc19bf40d833a1a2b23","sha1":"1a9413ef23fbc56b518a14dfcbb930918ad7b8e1","sha256":"8543e048f0e9070021ec810e72df62e36c201d61ab8d2426966d9c448aa4bcef","sha512":"613247dfd2db776929b339a4482ca743e8c62314e84037aba6d1ffdcb86a0046dd5f5318375e87dc896e0e099ecd4e3e8ccfdb4ec22953b78de5a5164ce1fe18","ssdeep":"768:vJCTXROWgV/LGbzjfxHgM3Ay5GFqCtIhnfBT96:3LM3AqGFq/hnfBTI","tlshash":"32d2e1132d79d0d48b6e580660c25824c74086e625a06e5b348ffedd63bd645fdf4caf","first_seen":"2025-11-25T22:34:39.269327Z","last_seen":"2026-07-08T11:59:44.379754Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/gold-fish.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.270Z","timestamp":1783511949270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/gold-fish.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/gold-fish.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj883mcrk9h\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxVGCx%2Fv9HHVT4RmyT9m5bnx4zGUE2LEeCosKk01o3SZpt4%2BgAAf%2FkWEyK8H%2B4IjTyjTujRvHs654sjDLgyg3I%2FN28D31ekQEKodgu3S0mW%2BNaSIRoXKOWJvzflyiU9WZXo9hA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd60569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26261,"size_decoded":27281,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2f88f76231b3c0aebeb4b7f4a85974a6","sha1":"b578c2112938b77d3006dcd2abfc6c043f309340","sha256":"feff1bb3095b8c118662bdab10d6e662b91b36ebbafb6535b1518bd509e79e8e","sha512":"dbf925ee16f6d6930e546ad4a9e687db0be6ca5132703d063f84e65bf86a5513a3c07dde6ce38513a5a89ba71c61692c09cc2d2b28bfee0db4fde69e86b51774","ssdeep":"768:wFwQ5nEyAzle70hTScD0/7bdj0WUgTKeS0G:w5Fds870BScIjbHJRM","tlshash":"d5c2e1a6c55e18a6f52f35e0c90406abf1001c0dae4d8f9e7f17cd1e37a54a822ba368","first_seen":"2026-01-12T23:19:23.766209Z","last_seen":"2026-07-08T11:59:44.381179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/aztec-secrets.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.279Z","timestamp":1783511949279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/aztec-secrets.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/aztec-secrets.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj4ni07no2y\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhURiwgbw0vIvjgF2wHHFjkrY8FShBPILWD%2BkdBrE62BEOKtVOFXrrYhrVyv44Tv8P14BNGSmxQZIXZQITZbLeL2uMZ%2BWuqdebVXHXUtTLubIm%2FOH9Ivmu41LftDzV4rV33m8Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd30d68569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31210,"size_decoded":32228,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6145664d4d219e2abb0bea64e440c26c","sha1":"c04e40b3c30d90df5504ef25846a37d293e7dca6","sha256":"7ed3f40ba8779361d3682f146fc4ea2a55796133d01b2ef497837850fab7674f","sha512":"57a650a4e3d8be48a2d5176cecee638df06d503ef2d48b13984e98d17216fad5d485a5b55d9d44f6ee8960df7c37b3679419f5ee4b3288e92c554d5e9dd3cf70","ssdeep":"768:O2lBe7jnbSKeRYJ5xU1bFS6xO8EoqoEwez05XvIEeS:ONnSTIubFS6JVEm5fITS","tlshash":"68e2f2e76710fe05f67d245c0c067a21e2ae939a2e41891736f3f990a37f151a38173b","first_seen":"2026-04-10T09:55:29.760266Z","last_seen":"2026-07-08T11:59:44.382763Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/ude.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.288Z","timestamp":1783511949288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/ude.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/ude.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj3ns0285n3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDJUj1i8N3fAkcVSps%2B66MsZJvFFIb1ZU5Zam8TdrlUXAMrLQDZXxkWqgUcmxBv4FlSNwdbXLHfFw51No3RjNpQJNw8nQCsaUTXSAKfrjtFfSZwMq6jh330FLSayJqZBXUqx1w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd30d6f569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7311,"size_decoded":8317,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ea9a24b14bb091b29e7af3b2bd5cfe0c","sha1":"a82cf4c4ebb1c73fc030cee7cd90239040e2b1b6","sha256":"98b7a1e63d9f87752058463ad1bd2f6418795b3dfad5db8380266e5dc56ed8ed","sha512":"450e7b84fb28e00e1d16a0185be2c476bb7767cdfa51c78702ae9fb4683977a657f38b53a3a1c9213852cbe610bcbe18e416f5b33b6532674116ddf2cceff465","ssdeep":"192:OlnpsjQRoteojN1I1ZNMdf1EhaK3l4N8Uo:Oln+0ocojKZNMUTAro","tlshash":"cae16d95befe997de5ac027048c2d382f338ae61574a73663a0c53e72fad420d645932","first_seen":"2026-03-16T14:22:50.896657Z","last_seen":"2026-07-08T11:59:44.384091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/in-bloom.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.271Z","timestamp":1783511957271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/in-bloom.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/in-bloom.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj90of9vnxo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhxJ%2FazklaekVMEj69BUuzwBF93cMDPFj51A1hLC8wUkC3MT7wSLMP%2FbwAHdipNBJ1ZzkWECumjHRh07E6md4zPVCOuIePdERTXszKuWN56YV4okecPJMNh6sttzTW%2BDCpka9w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04fff3569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31020,"size_decoded":32033,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"bd963d9c901c8bc12b5a7ca54ca09b05","sha1":"d9acd04a75bb3439b19430b4ee996f8ed1d81b93","sha256":"2a3d5f464c33a103e1ce95e0f83d3f24305e48818ebf42f68cf3686480001a72","sha512":"cded4b604f47f54229cdcb87dcd28e54a9689dd459d899064b08e6360aa8e498e0f01cddefd03fb83d86db22528bcb7d98a55bf9e5c4ff02259e4fc381dc2aa7","ssdeep":"768:qOIb1qqSBhY4mUtU5oDLk3BJVhg7wrsE0jyK:qHr4C4mU6p3Hjewrh0+K","tlshash":"e7d2e1c10a145a2ed0bd0b338ad7c39dcbdad5e495b625db56910e34a3b122f0cfca78","first_seen":"2026-06-01T02:18:17.527864Z","last_seen":"2026-07-08T11:59:44.384628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/fruit-frenzy.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.273Z","timestamp":1783511957273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/fruit-frenzy.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/fruit-frenzy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj7rfhhfqis\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7%2FxPHahEXmmInuXyiC3EGr%2BGsd4e3tHpa40LqLwU48mZI%2ByjKRQtjvGiPRI8qNP2CLZGk5FCnyKCiW9TflBUw%2B03pmrvs1jUTdylvMIWvzHHsfZf3CrjLG%2Bz5kgYirO30F1Mg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04fff4569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34372,"size_decoded":35393,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c03af8a14e7646627ab230485c72d848","sha1":"80f9f66c09419e0e5289a0019576a20935cb0745","sha256":"4841156cb8bd2c03c671812ea911014c45f5b7f18f311344e6e0d50ca5292c2f","sha512":"95be06a535725167523ec2677b01e1edeede14fb3883d0d69501983044d82eea3f762ed327559316478865d7dd70a64280c63b0916a80854fabad3b66ae855a6","ssdeep":"768:wf+1fRlPpOHs/lU9vSb27OwWvYcBjZNZV+0krj3xjWFv:wfglP3KSNwWQqLq0sjWFv","tlshash":"94f2f1223bd4fd093a2e1b788be758675b85028b2a729c5c11774079f6ed4873ca9d0e","first_seen":"2026-02-10T18:41:07.204541Z","last_seen":"2026-07-08T11:59:44.385569Z","times_seen":3,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/magic-of-the-ring.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.278Z","timestamp":1783511949278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/magic-of-the-ring.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/magic-of-the-ring.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kja7jmnkmkg\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4v%2FSDP%2BshdJbkqzzVCAJm2vGV5r9I9Szq3OiYnE8FYiP22WJ6j8ttFRfHEGJ90DEvAJRfj0WC4ZF2N7WBTrDMjazIB1oUXnI5%2BUsSLx1g7oLBsk0eki509O7j6PapJUpJqGerQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd67569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29248,"size_decoded":30270,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"447f5b24319b0d95d6f7c8e5b35d2dc4","sha1":"5ba0474a76c60d62377bef1238e0f6184affb789","sha256":"1fc67494d89b877c70bdecb822524fad1197d46fed57352a0292362ba718028b","sha512":"f2956faff4311116b63d59775e821df6af064d51496eb7ece6ff3e7ff73a13616f91d2daf6fa6a4397a9415c099514ef1af1146c4980d2f16ff4545e94bbb0b8","ssdeep":"768:fha8DuyaMG0712k5wnddF+gq4vz7fvfFpl9Upp:NqMG6p+ndCgq4b7nzlEp","tlshash":"0ed2e149423e5c0e756f9a90590e16c57f38f63359f7a91d88b34c7c0f725a80888e76","first_seen":"2026-05-04T16:18:31.00499Z","last_seen":"2026-07-08T11:59:44.386516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/18plus.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.338Z","timestamp":1783511949338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkz2ijvk1ar-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gqj96Mm8u1ZVDeAGVg8GBwz3S3XgHqjp%2B1Nm1F1dMGJTjMtK7kvAaH%2FtTHef95J8Ev6pyQSRqSOvJTS0P%2F%2FiVf5eQoL3Lru0EigQd7sIWKjG1r%2Bg4ws%2BbstZtcld5E6Me9WZJQ%3D%3D\"}]}\r\ncf-ray: a17eebd35d94569f-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1705,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-12T15:18:43.556268Z","times_seen":28,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-11.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.322Z","timestamp":1783511949322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzqbvz7i6-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdAivvHlq7N4n7ixUjlxCTRP%2Fi7o%2FX0TCoOP%2BdJxNnG0AtV8LAqf8R6Xyx4GB7cR15j%2BVANB6EpouHa%2FlmF0oxoKmKxirSGRvLVpEQ9qODJsnAPo00%2BJ4EBjj5MBA8A04vk%2Frg%3D%3D\"}]}\r\ncf-ray: a17eebd34d86569f-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1382,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-12T15:18:43.555024Z","times_seen":55,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/freaky-fruits.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:23.092Z","timestamp":1783511963092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/freaky-fruits.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/freaky-fruits.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:23 GMT\r\netag: \"dh52kj7p1r2ntl3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeZB%2Bdp1IPm2UQpp15KB56uEVt0UtNcUl%2B%2BlrpeA2dsoGac3QpoWpWUF66LAi%2B%2FO5iPllikhdklQd7tbFqSFbvIVD1PhixYWRFhjb4YAZM1rvcpwYeKUc2wIpwApgV9rlNsg9Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2959fe569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38343,"size_decoded":39365,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4487445ce138905cf32f764ec1d083e5","sha1":"919dab0d87be447727a4b4c2eb174c7e65c041ef","sha256":"bfadf2146f016da5cffac84a912c55dbd9ed2505f37b48b0623dc0a10c4f0429","sha512":"a212766e53cc7560963ba235f39f9120376b185613771667e8df3b5b95d82196668122f27c0598bdf97665b564008eb3ba12a4904573a278cc72c26badbc2538","ssdeep":"768:EwatjzogSYKvyRxe73nSWy6oZOqvIqIRq3hdJbqkrDAmBDBY+lui0nUuSFt5sxa:spvSYKqreLTilwkVbTEmBdl0nAsxa","tlshash":"2303e18011d7e00b8f9c8dd53ab5698b2f11ec88bbeba7031df257409f1f69249d519a","first_seen":"2026-06-07T21:45:09.804091Z","last_seen":"2026-07-08T11:59:44.391321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-13.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.324Z","timestamp":1783511949324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzspmdyf1-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZr4Zdde9JpB9DC9f5W%2FgFQXdp4gKxi8PO6NNbwFgiyEwaqWCVp6BEdBN0Ha7E3RauGfd48qzGrhtFERMIpR5PzI0KCeL4VF8udxeRdfVHZO9zHbr%2BUfSoAzSUrD8xhWo6glVQ%3D%3D\"}]}\r\ncf-ray: a17eebd34d88569f-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-12T15:18:43.482639Z","times_seen":55,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-17.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.328Z","timestamp":1783511949328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzxh37h2dl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6ZEfSQObx8Eo0HrLgVfgflVlg3OHh8u2ICONXp7p0l0wwGl0cf6Dq%2F%2F5wCeCRvmyWh%2ByMPK3eCrNxAG7%2F09yVVINGNxamdZPqOXqkWtcxoPfxROPhrZrKVTkaa5HiABkdUb9g%3D%3D\"}]}\r\ncf-ray: a17eebd34d8c569f-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":2389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-12T15:18:43.780297Z","times_seen":55,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/starburst.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.148Z","timestamp":1783511964148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/starburst.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/starburst.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kjd1y6aaf3c\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5Ykr5pXgrP3ImyxGENsB%2F%2BvvKrGt6VUT1GOVfVOB%2Bf%2F%2BW7F4jbST5CBhOGbSaGLCdfmu3pEsbqqadNFjmOVB7iQ%2BShELnLllZGpZUpMaKmPgCtbkDSchIWGH8VvaSbRDlUyDQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa35569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19560,"size_decoded":20580,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9d08f2c6082ba7b22c776b53a25bf936","sha1":"7748e3cd66a71ede88afbcc958277b7daf74a258","sha256":"e86fd97dda82d19e6684fcd23ef8d1d4d7306eba71b92a9f79db0b9a8c764b22","sha512":"bc23dff3210aebd92ab2d775b7385f920b76a5c49d05e9c7ad8d9790574eda8e34ce51c1cb0fe39959cfb50aeb7407a0c18028b51fa41337f433da8f62cd0b29","ssdeep":"384:hNhHkM2+0k3q+4TNrIs/NiT0A3rAMBMYwLy25xyY3X3/DtIPv9h9PcMjKwou:h483iNryXXmu25xvXbtWhdcy9","tlshash":"7b92d10aaf3095aefe3d5279e47de5639f04e84095914231f443297cb33caed0da131a","first_seen":"2026-07-08T11:59:44.394594Z","last_seen":"2026-07-08T11:59:44.394594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-9.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.318Z","timestamp":1783511949318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl0700uj16g-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXv0cWeMgCOKRgWWR6IgKHDI5Xnf31YnQaxMpHhzt89D6wrs6JkXyfp4JxSUVNOPrOydr4veRLBclWtvJX8yTsDrMGkhkZlE7vspdmBGXX2VTjPUOaQPuzBYCGtQvZZJnc6UpA%3D%3D\"}]}\r\ncf-ray: a17eebd34d84569f-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1557,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-12T15:18:43.777709Z","times_seen":55,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/frozen-diamonds.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.256Z","timestamp":1783511949256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/frozen-diamonds.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/frozen-diamonds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj7rfhhfjxz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWypIx%2F712WSELsEbCo2TsVTlLOI1Yg%2BVjPyEZCUSC1hPfhUBiS1EFgW9NAHG8JYbJV5JTADvzw4jDpP7CBXgwvJZb6zHFVfPoQYOBEAgUolT1tdkGne0VaThg3jFFccAu6Stw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2dd57569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25847,"size_decoded":26865,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a9716b9c3987876be4f7135c501d8b5b","sha1":"5e91cc7e772251555d83d39869c00ae9aed2205a","sha256":"122e74962853a09b106126ea3fb8df65be889b3e827f24e2a33b53b4fb5b4629","sha512":"bc391d9814f7d457b275645a73b12b772c4bbbf210342c2bcaccabc2d584c37356fd901553195483ce9621b7c4617c30b95e1e81af1775160ef9060d27157fe6","ssdeep":"768:Cbc4aJ/g5XGP37lRtAfGctnG7lJxlKlvc5g:R4aRg5XqIFYXxlKa2","tlshash":"5ac2e1a34f9a750ce2834571d185fb23d3a88e50a1a54d312501fb2dcf5fea6ea7f504","first_seen":"2026-06-11T03:08:59.221977Z","last_seen":"2026-07-08T11:59:44.396947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/duckduck.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.289Z","timestamp":1783511949289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/duckduck.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/duckduck.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2c5bv03bn\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wSVWmgA6YSOCYvpuyFm3DEBZLAYpf1AXzipVgpj2oqd%2FwUzrHQ7idOjPUOGKagxaxYkOfyNKRBp%2BHSRzPl02nwX5OWG1vTz9Q6p07uaTedhUhQP348PbBSVskfpQbHekoff0Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd31d70569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4307,"size_decoded":5320,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"b13767e7be6d39e78942c75818b06639","sha1":"e215307971d665008fbf3f161ecad61633f265f9","sha256":"f9cf4401620da2d7e4aab0e7943831aff1355b638751ccc6219a084f5bcfcdf1","sha512":"db13636278ec476a92c225a85eeddf77503afc51e7e6b4b7529d08e0334fbaf453137b3870e8b23f62211bbbf01935bd1df8c280ad57c20c7712ceb314c1c110","ssdeep":"96:Jpdr4dhVu3QoW4XNAtFOMVjxMTAuveYpeXFc8obctv2uJZTT+c7P:Rr47AAoWemfxMTAoveXG8oov24Z37P","tlshash":"63917d613716610bf67e15b80c810ae3b1856b95d2c106a639d27f041b7efc6d6ce3f2","first_seen":"2026-07-08T11:59:44.398249Z","last_seen":"2026-07-08T11:59:44.398249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/play-green.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.259Z","timestamp":1783511949259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl0giyhkjz-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMBMnfMNJULIcFZCURFw9UR9vLAyQsF%2FupoXl%2F0%2BsgUCX9iH2ztrnCn1%2FsrbM0vOZQK%2F3k9%2B7hUMq3xc7TqtbyqhHcuxJEgcvu6KrQuXAoIHunAz8rX3X8tub%2Bx%2BqUBgOpIi1g%3D%3D\"}]}\r\ncf-ray: a17eebd2ed58569f-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1374,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-12T15:18:43.51817Z","times_seen":25,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/qunerahr.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.291Z","timestamp":1783511949291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/qunerahr.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/qunerahr.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj32cedd2kr\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpS6x9NopLSiHroxfjgsA9eE1QFLfocLPG0ud96e0bMwn3Vd%2Be6tjrcrcDf2vhQCcmUB1wG2PVDkSGddSuMp8qeSlZgtFn0sPlZYzzFxrfN50n2LQ00WtvGomC6zeYZ9rKp7Iw%3D%3D\"}]}\r\ncf-ray: a17eebd31d71569f-OSL\r\ncontent-length: 3211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3339,"size_decoded":4241,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d49fb4c6b279ad7359becbbf08c256d7","sha1":"e0c8efd2f2616b29faeb11d2b38cd5dcf4793676","sha256":"8ef861d45e9cc837bbbd36a6f676514660247671c5dc62d87943053867d33559","sha512":"0955d9798f60d16fe5eacf0eb6b82bc973a89b66b141d561b2805aa5798367f04eab7b0d308e0006ea0c740d2da967e7b9357b0a5cad88a659cebe59f54b0cc4","ssdeep":"","tlshash":"ff611c76cf7e045ed02e473339957360f600ea5a3be89f537ae99d2467591d1c8d00e4","first_seen":"2026-06-02T00:44:56.613627Z","last_seen":"2026-07-08T11:59:44.400758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/surf-safari.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.152Z","timestamp":1783511964152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/surf-safari.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/surf-safari.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kjdbh3xctci\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9K6FySZvb1%2BZIs4WMGfKuD1n3mKClsyOARFVztCZP2H1e%2BuXb5%2BuvjXfIGr4Bqd9JQd7zLALWEn3zG%2FcJ7LLuD0ZbNLQZDouh980bD7Ym1oyhiwZqb%2FdBDztpxQeQ7Ozk79REQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa36569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38034,"size_decoded":39054,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c6bd7beaa8ed83499c9e181c4d983cdd","sha1":"ffc3e57ba4410f9cca7603187228fa1a2bc96e4d","sha256":"b2f823db76c06737b869a0c2600ddc2068b29157cb068deb955b945f93fb300a","sha512":"302a1997e8444821c887054b9bef9425ce89893bb299c83fb2e058ca8c00c16fdd7821ff6195e47a556d752c94da9a3508fcd871d43836aac48c89708958e461","ssdeep":"768:qpR+A4mvlgoGS6nnPBQLgVaUK/h41dsCh50IzZemiXL5Bv+bR:M+2vWdSCPBBVE/m1yIzZnyL5BmbR","tlshash":"f403e1eb3db6513c470e929798860730ef54ee59e0a34b833c90d5799afa7b442492d2","first_seen":"2025-12-21T23:52:24.765128Z","last_seen":"2026-07-08T11:59:44.401983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.779Z","timestamp":1783511964779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:25 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZklEI1YvVpzP2HoKiqLlZfhbyPtvORbBK9V8x1Il2wGUTzqRHz7THWUwCzwal89vvnsVf405c1CF52NR4pLjNQLXu%2B0IKghQv54HUVRNV78xisBsQdk7fsMtt8Iw1ejMWCtorw%3D%3D\"}]}\r\ncf-ray: a17eec33ea57569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":1029,"mime_type":"application/json","magic":"JSON text data","md5":"8ece20a92b1fde3ba67f88d747b80b0b","sha1":"997b413b901292ec004511e56afec4aeb97d5ebf","sha256":"1c2f50dceacb92af5c2cd48670aa6d10029517067cdeeb7c21b3d3c0adb58e00","sha512":"9ede23e75c3f3ed2722c723d42646134f8aa77af9810ad065a88d0b22948616b489b79c7220d29713049e760165c8a552ca65258c65eb223fe26ab77a4801e91","ssdeep":"","tlshash":"b9a022ea80e0080e82b3a008fcab30e038b08f8b00b0cc8033acccc00a2020a0033c20","first_seen":"2026-07-08T11:59:44.403111Z","last_seen":"2026-07-08T11:59:44.403111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/subtopia.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:29.111Z","timestamp":1783511969111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/subtopia.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/subtopia.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:29 GMT\r\netag: \"dh52kjd6pn3tj3b\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uC6GLRHerP32UHckY25adxucT42wv%2FfE6MxjGk97N2WHVXSZ%2FbMXdGHrrwTQ7c3oc1dlEAvQTSjr4kGIUdfhR2t%2B4BzIS4NYn%2FuskuPAqCuRaYSMYDjimTD9xI9cl6WwUtx5oQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec4efba8569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24743,"size_decoded":25758,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"0142fc70083b077f02744205922da40a","sha1":"d0ff250b066b33348a40adaf6e5d975136fda20b","sha256":"d76fb72ae893a74fa1de42bf2bce8ec4a95e0e879f94001eac45688a624a7be5","sha512":"024e1326f6d5f0f083bcfd6d986c13052d2bc95cc7a7d443305bd7ca6bcfaaaafe8cde24132abfd1799e1401366d7b992935707395f573598685b2cf9bbcd297","ssdeep":"768:czgh7+68jI0Fd5kmSorJ54qVEnWlr4MTF:cq0Fd5kmjAqVhr7","tlshash":"9cb2e16b47780654d81f83bda724a3d9b644ee99acdfdb3b7cf7d01a4799110284c322","first_seen":"2026-01-12T23:19:23.801711Z","last_seen":"2026-07-08T11:59:44.404689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-6.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.314Z","timestamp":1783511949314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl028k1015o-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RITBFlnuIoLJ8z0MOuKFFPUuEyufS8EIZ9V7CD756Bekpj%2BWhpojt4oEO%2BJibSEBgAURfgSZ2SfQcI0mYTTZsZt2HmS2tqcC97KEJNyYc9reHP6VoqQa7LFt3Ef1%2F6zPxPBYDA%3D%3D\"}]}\r\ncf-ray: a17eebd33d81569f-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1500,"size_decoded":1702,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-12T15:18:43.795193Z","times_seen":55,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/5.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.335Z","timestamp":1783511949335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzj6oqx164-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUSIDy6hEdGDifTLi8ud9HBfDKoHuKFObyvZZCaLOp7j3Pj5aWocIsasfEtZ2wzh%2BD9%2FLttXnjEmHwBOb%2Bo7CV8zekSx4Tyi6SUkJ3o84AK8bLivhD7eF%2BE73LVyJAyEU2yZOg%3D%3D\"}]}\r\ncf-ray: a17eebd35d91569f-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-12T15:18:43.616033Z","times_seen":48,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:21.779Z","timestamp":1783511961779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:22 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WS7pWIfvlhBlRX2HiKukTGkWj0uZh9gcJ6kFCRuqYMKxcIuK9U7cXKBTufeJt6XFqbl29s9So1nKhEz%2FWqE62AYG33eaN4MPBz3%2FxReOtCe3ea0BPFCRNuQrDwgEJtdIRp9B0A%3D%3D\"}]}\r\ncf-ray: a17eec2129b5569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86,"size_decoded":1036,"mime_type":"application/json","magic":"JSON text data","md5":"a1057bae9489603bc4aa6e19ce804952","sha1":"741cb800841e39a478be7bc4c29702bf0932a362","sha256":"518c2bc2608d5838a8ccaf566523164246957c87b1a9644d95f618c87f91e869","sha512":"807cff6b361bb4cc6d1813feb4c467d477296b6dda061480d78a5918e67cb6132118c7255769fa18bdceb689da9e49bbd5228e73d7cb8115a175e2aaf153d808","ssdeep":"","tlshash":"c0a0118ec003082b82e30000ac2b30c0a0a00a8308a88aa0be82c8e0c82820b2003e82","first_seen":"2026-07-08T11:59:44.406981Z","last_seen":"2026-07-08T11:59:44.406981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winning/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:23.785Z","timestamp":1783511963785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"2274\",\"2617\",\"2436\",\"1868\",\"2247\",\"1905\",\"2283\",\"302\",\"1350\",\"565\",\"668\",\"2332\"],\"locale\":\"fi-FI\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSXbjDs9%2BQ7M7l0kxhK3poeujZA9GGJ%2F832VLfCR1Qjy4JZCh6IlCU%2BEqd05%2FEEhiovkh3ClNuwIg%2F44jnTKqpLItCw7Y5YPKZLk6DhbHK482DfdqjtRqfNYm%2BvCm4CptxkRyw%3D%3D\"}]}\r\ncf-ray: a17eec2daa27569f-OSL\r\ncontent-length: 581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8620,"size_decoded":1574,"mime_type":"application/json","magic":"JSON text data","md5":"c273cf87e1bb536973e1ea510355637f","sha1":"9678d8c7d48b14ad691d12cda1abc8ec7ac9a008","sha256":"4b8cf00b395a8b045fb48ecd90d1de7d148a7d44ccd5138395e164e173adba5f","sha512":"76194fc6f2d063da5f4b52e20a90e0ac5bd90956bfa080df8398703c939c92f7da6ea7ac9f9ca3cf321eb6ac274aba889aeb160ea1f7552a81599b4a3bea763f","ssdeep":"96:RfTfLOIfvfLgbf2fL1YfVfLxLfPfLWqfMCfL+0f8wfL+MyfMfLR9fAfL3GfNfLS5:B3","tlshash":"ff025e55a9b2d73b76d360e0ccb3efcd1014e961a42c8874bcbf19a2d7228146ea475d","first_seen":"2026-07-08T11:59:44.408116Z","last_seen":"2026-07-08T11:59:44.408116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/alpha-squad-origins-captain-shockwave.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.268Z","timestamp":1783511949268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/alpha-squad-origins-captain-shockwave.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/alpha-squad-origins-captain-shockwave.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj4blc5um7z\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCApbpbwVBbBzRLWoP%2FUqpQhMrJpDH46HZC1HMv6aK9mnTr943ZFI4Vn9pRzstC2jZ2sFOIM9tByi95WhKltB766Yiq1XljVWkYdogQ%2BXHOTZ%2BvNuEzosV1Z4zlTocCsbS4RxQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed5e569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28799,"size_decoded":29841,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3cd45f88ee34d9cae6f53420cc52cf4a","sha1":"45ba38c3af36e0b2acaa99a4031f3fd2e0b8d344","sha256":"bda969991a7e9d6a3e4c9761c681557316c440988ac450080e775c9efefbbd22","sha512":"56cb310daa2fbbf435c8eed780e51140983ea4bf42a772e59f7d03b8332998edcf56a7e1eccddc4f5d2003adceb6a9abeeb6b15ca9f0ea110d1a5b72cf1652b8","ssdeep":"768:8pK+iOZsftdTssLa/ZGbc1/hK5ycBpWiVGIKl:8vNZQdT6H1pqpXEl","tlshash":"19d2f16713c4cbc55aecacfb5a53e868396ae44332b53c79e682d3728f3d16416c806d","first_seen":"2026-06-08T21:53:39.697847Z","last_seen":"2026-07-08T11:59:44.409218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/starlight-kiss.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.277Z","timestamp":1783511949277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/starlight-kiss.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/starlight-kiss.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjd1y6aatw9\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8vOzlY0lQAoOzUNzeYlFNeUSGLyBk6i9wQ5t5XjfimhqNPDwEA1rS3mIsgCOsa98auFYOqpVyCiqQNp5c%2B%2F9QZrFUVMvj%2FtUpSO9cdUye%2B6oi2U0K9sTd5ND4k4GM4L%2BQ56QA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd66569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38745,"size_decoded":39768,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b1ed8d94e7bf80654afac1c550ead748","sha1":"c8d59c48bf66213df8120896baff358c7548d95e","sha256":"89550983d499cdda4361ac5c9cf0eef3949a8de634c3a67fe378300eba56afff","sha512":"69c089d0f6ebfa1eacf2a3116c91c4f97cb4f619b265bcc92c66c6f34b0f4e55dc32d5b0ef9dc0d5729160cff9ab530c455677f591eeb2cec116170a0c18e020","ssdeep":"768:KNM+712325Vt9zuDNqKZFO7JDcWq7nOr01mHqmt1EHW9yGvFtVenfc9N:Ki+712G5VP8qgO7OlTbUzL8XGvzVWkb","tlshash":"f503f13e3c7dad2ffa6c6f0031b5e1d4d600a4782866c5b5b5ab3b73678e9706e49050","first_seen":"2026-03-21T02:18:55.62178Z","last_seen":"2026-07-08T11:59:44.41087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/play_icon.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.305Z","timestamp":1783511949305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl0giyhkjl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQyLqVWPH8fw6kbG0yCIz7zFUwNhDB0IHlPArxWogt%2BWlt0DUj5671HA4e2VM4IQUoNH3mB5hxcKh0cGYO1wm%2FKTNHTyJGyovkSqPUPXCYBpFciCO1k1%2BJbF4iXu0DNc62WN0g%3D%3D\"}]}\r\ncf-ray: a17eebd32d79569f-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1362,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-12T15:18:43.660831Z","times_seen":31,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/2.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.331Z","timestamp":1783511949331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzgsyc517d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5b5srgQsbb4XOZwuQIaqFHT2fBQUf1S4GmpvFGhyaOcyBlZO5eCrXM8HnPD6FSnCGkcvf7WyG0GZH3B7j%2Ff1oWntJw9BsEPuufi6HPC3pj5SYKmyiCGFzXRNgBMajjEWWoS9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd35d8e569f-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-12T15:18:43.713965Z","times_seen":64,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/gambling-therapy.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.339Z","timestamp":1783511949339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzef7xd8qi-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGu%2BMsF5ihxp1Qk0w5jlGFONINjm2S6zntX0tsRoEq3xvEb12GzGOkSiXR2%2B0ow3VEvRSAKtHr1Of226xzIUPxSxoA%2FaAcl8TE%2BcaJfz4uBdyu%2B6YN%2Bw3t9u9sRuqVeIV8%2B8tA%3D%3D\"}]}\r\ncf-ray: a17eebd36d95569f-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":5678,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-12T15:18:43.484962Z","times_seen":30,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/images/text-block-bg.98c87d8c.png","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.633Z","timestamp":1783511949633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/images/text-block-bg.98c87d8c.png HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/images/text-block-bg.98c87d8c.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5fet9t\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sjzi%2BMT%2BUUdABBE0RiZtaPidY55uyHe%2Bq2di6psDLzXkR28vzPNbQxG2NUg677zWdVaSq8cvaRDTTJBPlgRF7ReTPM4eb0dNSNw7sEctL5dRO3UHBlyWNkVICZBT5aKCLJ1Huw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17eebd53da3569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":691121,"size_decoded":692215,"mime_type":"image/png","magic":"PNG image data, 1240 x 452, 8-bit/color RGBA, non-interlaced","md5":"3d30b0ef9abaca665f714137f1436c0e","sha1":"0577b9d71310543b920618bc32478ec6279bbe08","sha256":"280d28d3cafe11be4631b21140a24f568c75870c1befd522569d31eb611c10f2","sha512":"8c472681e40061bed734859e2e8f4dc0adb871dc95cb3d6a07c51e385f5ffc8aecca69342994118d3ea7a875e60e17d8c33e81bcdac8efb6d4e225ff37624317","ssdeep":"12288:gSEcFfk5rDXLnKEgeCdf6eRxigxiyBiUhE45SEDiMpEdpD8lCO+:9lkrDXTKNePeRxigsykgE85iMpEdpDv","tlshash":"3fe43305e0c026e3d75c0fd27357a969cfb884626c18bb9a5896f0b3db5f87a01c4f92","first_seen":"2025-11-25T22:34:39.24658Z","last_seen":"2026-07-08T11:59:44.414023Z","times_seen":12,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/jade-connection.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.260Z","timestamp":1783511957260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/jade-connection.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/jade-connection.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj97tmi5oiq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0uzqCDGw2akK%2BDMFWLri2VcRuDVsNGqzVqlsYBSfpy%2FJox3Bldd4Flp21vN%2F%2BMG5YWW4ojgiWKNt1JXUelHf2icDg%2BwMriMMr8DqEBvNMIsjZteXiO7Q0UoXIkdZHvQOGVAvw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04efee569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31778,"size_decoded":32802,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f95aa179dedbf6bb88640c03f05b3f73","sha1":"358fc90d42b5090b809b4090d09d2e9ded272f6b","sha256":"a77c8e322dcc6830611a541e14e80fce60b5fb53bb3e566fd184bb6d28d7f2f1","sha512":"ecc986883b16b7f53b085cb56571e4089c6f6406d847e00eed9a451f9fac6ecb4d2c4c6919a25233413bb342f907718b61fec2073cf1d85e3a9f2ba53e6e6e6d","ssdeep":"768:chJcRlB1WpnhHMNbZvHsBFss+EFQC27Nfr5ipEebD:cmlB1Wpnh0/sB6c87VrC","tlshash":"2ee2e19772980ac2e49e53b78a59d07743a5803eb436996b60fd643ee70e1ca34712f0","first_seen":"2026-06-19T02:29:17.611363Z","last_seen":"2026-07-08T11:59:44.414647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-0.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.306Z","timestamp":1783511949306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzlkf5o1bg-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxl3a0%2B9aXgtuyTKsFb5Lutx7Zt8Ab6ZF6ssnwlLcX6JZkDHYlHeHrORTcZxVVKSihajVkvomybJHEBmzssR%2FJZcBEmsbSpiPhnHrQcA0OtqRFyLBTVo8TAtYUlTl7DZZ23%2BKg%3D%3D\"}]}\r\ncf-ray: a17eebd32d7a569f-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1742,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-12T15:18:43.898118Z","times_seen":55,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-1.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.307Z","timestamp":1783511949307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzny5kf17d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjbjUBVPKs0X5RAqPAXJpZQC75yQkH0Eh4QAY%2FuMWhgUezLrsMWD8wWsVqiRTiGeEEnJncWcdjGbyCdx4h8H1wG%2FkfCUcwj92FTZx0h8atQEjM35RzL9o5HXADw2y4VcXoqF6w%3D%3D\"}]}\r\ncf-ray: a17eebd32d7b569f-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1646,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-12T15:18:43.920419Z","times_seen":55,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-15.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.326Z","timestamp":1783511949326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzv3csq16j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RP322HQwasHqrFAusleOkge0V0TRBCZleOOS6xna%2F9xHKq7kl0JORvCY%2FwVdsbtRoJCSZFcwadMRe2Mj20q392Z4x%2BR6G0lLzJdiOOG3AyAU6m7J0HlduWKqyzAsPALyMFKykA%3D%3D\"}]}\r\ncf-ray: a17eebd34d8a569f-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":1794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-12T15:18:43.563971Z","times_seen":55,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/arising-phoenix.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:14.378Z","timestamp":1783511954378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/arising-phoenix.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/arising-phoenix.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:14 GMT\r\netag: \"dh52kj4iqje4pa4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSnjtmUOKjhN6lyQrfxzjQwRQUkLWCfXGgr3qwzI8x0U%2FUCwTrDZDQeBcXKquk3hKITFa8n2pb9dpXxSD6dvTor8nDyOhOKpPpFwIOu4g%2BqXtYewrkWyYKbnODGuvxz3DFZ3Bw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebf2ef1f569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32764,"size_decoded":33782,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7488b069b562fc51fa2d4b5cc45ea2f2","sha1":"1ff5948a202556d04da82bfdc50009bc8b113a38","sha256":"0d404c3b250d6a0fe34aad0aab990eed71de2c21ff7d229e08ee4037d1651304","sha512":"fb429e294eb7b701e00a1a3ac8e55e0ca4696500f34eeaf31e36358cc364b149e73eaad98ccfe6eb0d890291a7c088efd719b486b47a483e600405949f9c520b","ssdeep":"768:Af9fB6DgImncTvr7fhu70W1mYNpj38mdHm1+Z8u3r5/btc/3:AJBEgImncTD7py0GmqF6s8sl/m3","tlshash":"b1e2e06406f7610db83e0efa85a4e390c9296d869b6e15833eb3010dd7a21cad8f3853","first_seen":"2025-11-09T11:22:30.381014Z","last_seen":"2026-07-08T11:59:44.421731Z","times_seen":5,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/fu-dao-le.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.154Z","timestamp":1783511964154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/fu-dao-le.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/fu-dao-le.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj7w6yaynuf\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDzQnmZc9iGRJSRxNRk%2Foz2q4LpFiL0HIE71dWxs1TEpv%2FuFm5PhX11rL5hCLCthCnuDJeTAXO7LUCEv654fCQPFLvalQiQ7G4ETUsHpzfzGfLAFCTOVuVXo43OSSQP6ReUHOQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa37569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30903,"size_decoded":31917,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3e26d9b0065346229fb26db7984f6369","sha1":"678273e3d54cfd64d4e3d4e30cc820b6e373acda","sha256":"9eb5f698c288c2e9cae724a824d30079a8bd288267cf89f03841c5996a1e2d78","sha512":"777fb2db9ca307c14b6a40225974b422c7c6f0ddbc420811eb975c6330b414bc54d9257d3c76ed9e80a4c409fc454ed3ee735a1022cc7f16254f60e1d8132a0f","ssdeep":"768:Dvy8IoS5NmsaQ7MywypN4w7ADmxkDVdO6m7NJZ:Dco+Nmsanywycw79xkDbzuTZ","tlshash":"6bd2e0120ec9864141efca329375a14578a3c2d068e7ae34f9564f326b78f7de87191c","first_seen":"2026-07-08T11:59:44.422372Z","last_seen":"2026-07-08T11:59:44.422372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:59:08.362Z","timestamp":1783511948362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 686\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 08 Jul 2026 11:59:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en96b8860a3c7068ea0a253464e3a26202\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLRjGUOjQ%2FPvbjXmV1FJzmxVAjo2cR3nfOfGvv4AtVetlOndUWiPyoBtPSCDE%2BpCyBouyxcfcZ6GA6zLio1v2NwClTZnrOtL3pQegyF7b9pN4TO4Khy3FLcXXiQI%2F2PUetMN3A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17eebce8d27569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140066,"size_decoded":32163,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1936)","md5":"e63225184b91bac143ccc9ee99d4d5a3","sha1":"f3a0d9b4cdee0f169f138cf2c4120738f41875c4","sha256":"80a5df48b7ee799a4901f124693e0e4b8079d7c653e7ebd4913c4ffd44303796","sha512":"ddb60fb5962dfde0ff8b3cfc0d8884f5f6e3c4486520925df9b1dbe5f06321d7f31b43d070babb9ac0bcd537aa09ac2bbc8a89f4f904ec79399dc6484eaa1071","ssdeep":"1536:lYufQYbt2OrHzuTBEu55L3u4B/Ob8VsMS71ubR1VTiJ0jFo7B:eYbXEVH+L1Ik","tlshash":"0cd3d79912f1c273508382ca2e611b6a3ec0e753c9560a50fbee9fd50fd6d95bc2361e","first_seen":"2026-07-08T11:59:44.424692Z","last_seen":"2026-07-08T11:59:44.424692Z","times_seen":1,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":171,"connect":22,"send":0,"wait":405,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/next-arrow.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.283Z","timestamp":1783511949283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CouXh5pi2M6C5p9pZWmVZfqr%2Byb%2B80zBsF2RuWArTrhuCQxWXPBgl7R2RwHODKbgY4RoRvI7YrDJchW2uLUGVY5abZulhwjqIm8cz3BXsrFOGtJIY%2BfUVxSQTADJ%2BuggiMvkxw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kl0giyhk6t\"\r\ncf-ray: a17eebd30d6b569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":1165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-12T15:18:43.509688Z","times_seen":76,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-10.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.321Z","timestamp":1783511949321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzny5kf29u-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4A31Gcfmej18a8zhON%2Fb5y3yMhbnX8KUPdE6rPp1wpZrSZWUewhiRh5z2%2BjFj5V1Gfikd9MuRgkELO47W1WHAiRdlvaQBGbVbeswUbyAMfaHcMluBzbzwKpPmNCnnisfo8Y4rA%3D%3D\"}]}\r\ncf-ray: a17eebd34d85569f-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2946,"size_decoded":2370,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-12T15:18:43.798952Z","times_seen":55,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:18.778Z","timestamp":1783511958778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:19 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBKtqY%2FI9ZkY6VLUADQZ1mlgWmTQ5voq3FlzGx1qJBjX0eSISeXQmzuo2fAK%2FtYOx89FMUnEv30RpT14tyYgN49RPm0lLw%2FeOH2a%2FKHrqVnsNxOl65DXzAXhAKTds%2FUNp0cSjA%3D%3D\"}]}\r\ncf-ray: a17eec0e68be569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":1059,"mime_type":"application/json","magic":"JSON text data","md5":"ac4fdfbc8adfcb55f2f441c814ccf884","sha1":"217cf1a267adb75b80aa3d3b1221271c7f5e4c8e","sha256":"6634bfb16fc49e33637d0d2bbc9cf597e8d704ba70fcf721d476f91d11a86cff","sha512":"aad57c35cc4a18f571b9cde1987ab587577f4bae6facd3be69d8732d1a0c2d7c56804a0d89731a59fd72365b5ac2d08f04d990ffb17b8a1154dce7828cb4fb39","ssdeep":"","tlshash":"a6b012d7c9c6b47f132751544eee30809e615b0310a07e0152c8984106206414023d00","first_seen":"2026-06-30T02:37:58.906493Z","last_seen":"2026-07-08T11:59:44.428052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/ded-moroz.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.275Z","timestamp":1783511949275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/ded-moroz.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/ded-moroz.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj6df2vgmt8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufMIHXh5IiAirhk1mJc4KWsvuJSdtwkIDUe7fV0Zm%2BcSZVqwwXogYwdMYLZowdZSuqJk%2FtZJGrWF0vQafVvZ4c1afxYeC92p0JO51wRKk34AdEIdcbWCE2MIzlr5Xk1%2FPg%2FVZg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd64569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29564,"size_decoded":30580,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ff1fdd7bb8f75879334141ae3833ae7d","sha1":"27ffc8e2c0530a70d492b367adf1c291db9d66ca","sha256":"3b0473a3b1c976ce00848664af8d1e190f0f4ff0e4ff088edcbbd0cc7cad1180","sha512":"6f6e035b44702d70836646283ae75e9949940ccb571ea0bf726ff189d6d3c5fb4ebb381b62430ca4d6e9a41702a27feddedaf9ad5af8a8ec987aba03d2394601","ssdeep":"768:8V1DX4/l6LRPkfCIjqQT/SmkmWCegL0QzX1Maku/gi8+HxkF:8V1DYl6lhIvHDHX1MRu/gQuF","tlshash":"fad2015dbbefae35467f10f6d04c7b366d1019059d1e79e67180e1e80630a3322e59fa","first_seen":"2026-07-08T11:59:44.429948Z","last_seen":"2026-07-08T11:59:44.429948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-12.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.323Z","timestamp":1783511949323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzqbvz72xs-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yifv8cnL0aaKITBNQ6wkH7CbPDlR2BfgKzi0wyvLGRykxbqey7t12YsKViIprzVdp0VgePSdt73KW03q%2F7UHdq63Rw052fdKpIvFzn2LAFzFJv7YMKLpGvlR8rQXoSSxLG3j2Q%3D%3D\"}]}\r\ncf-ray: a17eebd34d87569f-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3808,"size_decoded":2731,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-12T15:18:43.712848Z","times_seen":55,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winner/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:16.792Z","timestamp":1783511956792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fi-FI\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"830\",\"128\",\"915\",\"763\",\"190\",\"699\",\"641\",\"546\",\"251\",\"858\",\"359\",\"204\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpI66t3eG2YPASp5WDGfddZdqlDh6CzxPxmDJcZOxmAuh2r5e56tMQQoZqplF9MjYcHOkvIuuG8y3mKTkW5AJikyA4cxU3Epf4WeP3ciPOsPujQOywMqUJWKxCh4LuRg1xmHiQ%3D%3D\"}]}\r\ncf-ray: a17eec01ffb9569f-OSL\r\ncontent-length: 213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":534,"size_decoded":1194,"mime_type":"application/json","magic":"JSON text data","md5":"0aff46c8e1652a750c1b27894ac2b062","sha1":"90eaba71eba2bdc2b01ec29e7e839ef7efe3a4e3","sha256":"902fc039e876c84283a763bb50687c906274cd4585468a931a6edc71b55c9b67","sha512":"ac828208464a251cf18ab6d1933f2d02b5c2dee7f4141e6632468d0879b26039fdae758ad862962cd2490684b6e6b14ad8c4eff651a4b46a758799a56505fb2b","ssdeep":"","tlshash":"0cf08c52aa31ab3fa18310d0dc77aecd5805ada3942d4438bdbf09a1d3218102f8864e","first_seen":"2026-07-08T11:59:44.43458Z","last_seen":"2026-07-08T11:59:44.43458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/space-spins.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:26.093Z","timestamp":1783511966093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/space-spins.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/space-spins.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:26 GMT\r\netag: \"dh52kjcusz20hxm\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WedX6x1njKftepsujElrtoZ8VNDUyYcFL%2BFgiKvm0QAomQm1o2HNX2uxCXygxXtT%2BpQH%2FxA9S8vPI6mOpcVvD5TwAwQKPNs2JIRIvsIPJTaWWzcAhHvREe9%2FOOGOb2D7zg1%2Feg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec3c1aa2569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23242,"size_decoded":24262,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e6ce6a3d2fdf997e64b4149bb2987f5f","sha1":"f665f18d1be07dd84af245a021c32ae15fc0ad76","sha256":"36816f91414a7d4be6d920b332dda1a1b0159439ff9a707b008bb38bf89b20f1","sha512":"358fe18a35804c40aa138b958a9ec968626559cea81e52e734296c6aada407af4400c4dd4399a70812e544223881166969c5b472fb0fa6ca4876830f415fb5d3","ssdeep":"384:hW8Q7xsHmDtJJDjwlRiC0ZbYE+64Eo8sAJHoRIadzhLrLqYjqZ/tlQx1SIm:hrWu4trD8dED4EocHo+adzhzItlQ+Im","tlshash":"cda2d0355521f672d96c31f12ec8362591202b993220b67f45340efc7f5abde9aa03be","first_seen":"2026-07-08T11:59:44.43591Z","last_seen":"2026-07-08T11:59:44.43591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":139,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/apple-touch-icon.png","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:10.297Z","timestamp":1783511950297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:59:10 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPEYLrc3FMhMs%2Bq15cN%2ForX0UKgCyvU2%2BcYCSCtwA1gveaj26%2FG0V8NiKOO6qpzcXaglmpABJMzrlmGl5X%2BDHed27vAiLpEYzOjig%2Bg3f8xW3fifYclA7x0vRXgKmV%2FA4d9sKA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17eebd95dd4569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29907,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-08T11:59:44.437371Z","times_seen":6,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/goddess-of-wisdom.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.254Z","timestamp":1783511957254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/goddess-of-wisdom.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/goddess-of-wisdom.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj883mcrklb\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UVBVvALSKQnzNcATPaTsXNprnYJ%2FQQGVhHolEsRXlOVxl6uQ0llkCLffpa9%2Bh%2BaDM%2BIdkf1FQKu%2Bq1SCAwNSGVaoi2Bpbw2iO5jWuJpNRzldIPnxcW17JZcisuvqkm7kDFNcQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04dfec569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26687,"size_decoded":27713,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"56c01ad14c57460d605efaab832db413","sha1":"7dd29ea4bc2c5690f94dc34438e64279f2977113","sha256":"99ec347fc5750d340ac835d435e4bcb2840fba3d9ab90a8dec21d435cfd7bc2e","sha512":"04673af855707a20386de9e87d8095cdca0843dc571965421b259365da81ce98306111de211cbb8e66dbfd14950ef77718ee16349942f6a6505e3e7c3d537d57","ssdeep":"768:mzKaQjxI2zWyGJ/MBt10/japa+oQ1LBwrs+lT:FDWvRMbjpxrBa","tlshash":"0ac2e01ecfbd23af9e1c7271459c5a26930c13d376035ea2f2b4344b977ed9089d2a88","first_seen":"2025-10-14T14:51:49.393162Z","last_seen":"2026-07-12T15:18:43.907752Z","times_seen":8,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/logo-69b94e98409de8.70818183.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.247Z","timestamp":1783511949247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b94e98409de8.70818183.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/logo-69b94e98409de8.70818183.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklc5rc-br\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWo0aPlj07f%2BDf83s45YDujLGIUe%2B85GZAs%2BYH50O1JPIrDgKwv5Nllu6qF6jJ0Vohy2XQ%2FRUyvobkuQ2aTsFTFRqyMEcoCQc81No61%2B7PqgHPh75IKcZfFaepqashulXsRVrg%3D%3D\"}]}\r\ncf-ray: a17eebd2cd50569f-OSL\r\ncontent-length: 3227\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7464,"size_decoded":4289,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e130fd9a68c17efae19412ccfca7957","sha1":"434c7db4802c1b4879a7162d7653b1d4a26594c4","sha256":"81bdbcf88a1ed94df899d7528a6bc9278df6b0218a3c937c77e6efbc7aec00c1","sha512":"a29086655d37a1d47fd62543bd55d1ea339ef2f57463ec7b34f766204166432b8494c3baf43af7a90e1e123d783fee5fcecd120ec5e963c6067c32d495a5b10f","ssdeep":"192:SUbeXT/clnP/C0wIWwtgXpZUg9FWLd+PrJyCZ2CiZ:YXLchUwt+wgnWLd+Pr4C4j","tlshash":"05f195cd3bb49ee9cd75d7e2ff0120687a27c0ba5995ce60c1559b0d349086cdee8c8a","first_seen":"2026-07-08T11:59:44.439581Z","last_seen":"2026-07-08T11:59:44.439581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.252Z","timestamp":1783511957252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj9eytqggqn\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Go0AzqV%2FH9QQQjEWKnAXAprNMhbzrYM6V1%2BM%2FtCRXL5uWHb61IG4njp%2F4lTpwZyMzS3albbPK2RPzyzyqb4BJfFdQc9HgNhOuG61RV5mPYiWuNfoTIhs7QqsMXfX6xQHMJ4i%2BA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04dfeb569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21695,"size_decoded":22734,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"aac66422ab6f35dbbebbff9bd257bb4f","sha1":"5a3a33f4f8ae36933ce0802281cc8d23744acb65","sha256":"813333379f6e408afabbf3280cefe7b1f26f1510e3356443f15aa84a8e629879","sha512":"d369278d2fa18d49ebb46e541096cd86c70fdbf988c6554c34be4b6aab56d94b0549c845b250ef94f7350eafcc80250953690d01ac13e118a55f96dd288a8ad7","ssdeep":"384:F601+vPpC7fprtox83epnSUTHXuWwtunV+2lxzjURoNEyw9i/V2:swPox1xpT3DVbdhNEyb/A","tlshash":"bfa2d1802aebca9cf17d93f9574fb12c531f100aa9b6570e1a284a6053daadd1cdcdf1","first_seen":"2025-12-21T05:00:13.775322Z","last_seen":"2026-07-08T11:59:44.440851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/9-lions.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.275Z","timestamp":1783511957275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/9-lions.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/9-lions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj44g4xkqjs\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGbNBmeIKI1tVxnoZJ5ytnO4TIuh00Mr8ZbyH9yrlLwQH%2FD%2FN%2FDxB5do9ZcBnG7CVizVaB8JFInNR%2F0Mzh8BpcwBms%2B2XkeBiElhO0G3OEJauCl5YZLCk7eQCFrg8x%2B9NVtMcw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04fff5569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34408,"size_decoded":35426,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c8a4f0cb1cc845e38f966db0b63bb7e5","sha1":"192caf73c4668a72c02aecd6f2235532c4cd9a76","sha256":"70f8ef448c399c4dcffd5c2f5a94c764050c4d7cba83439258990d9a88974639","sha512":"fe8d9e487c79d88e8054ee440d271c333f15f73f596b842f08e672bad7d4244fdd6f84e02d1fc5b298cf6a018d1e3d8e29b9fd9db2357ca3ed3bc85c13911de5","ssdeep":"768:7s+l0NNdAhoJWNMlVdwEF23w29SRH+yuu1PiHniLG8vYJ:7syOAhoQNMlbf23HsXMniC","tlshash":"f9f2f07e371b20629d58d3ec5cb383a332324c922f51658216797a253fb8b0365da5bb","first_seen":"2025-11-17T13:48:13.610625Z","last_seen":"2026-07-08T11:59:44.441724Z","times_seen":5,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winner/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:23.789Z","timestamp":1783511963789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fi-FI\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"88\",\"830\",\"128\",\"915\",\"763\",\"190\",\"699\",\"641\",\"546\",\"251\",\"858\",\"359\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpZlfiepfdnyYaaOWEzRlym67dk4Y1QY4dABg%2FB7eIBQ5WYSkk9GX60RgvpuhouxKP1SQDsByKPO8auceOfkidcRLB2ONkYKIVi9Pr5zIY0kvIvnPefxxhMODBzZz2pUCyHDfQ%3D%3D\"}]}\r\ncf-ray: a17eec2dba28569f-OSL\r\ncontent-length: 203\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":529,"size_decoded":1186,"mime_type":"application/json","magic":"JSON text data","md5":"4c7f009dbbbdb1a73126a8925653023a","sha1":"02189e5c6165f32975d34b7b202c92e61c8d5766","sha256":"1b34e4b3e88328f7e075c4fbf828b791b5bd119f751d66d685a9f75c3c3a5c01","sha512":"e7a676102131f36fa110950f8a519f02a1216092f3f586a766ccc267811a95e1231deb15d8426a2c01f2e0d7b84b606eae70138e6a7c32724bb15a630a09b272","ssdeep":"","tlshash":"fbf0a0626b65a33fa08310d0cc77efcd1011ee62542d4434fdbf29a1c3218106f9870c","first_seen":"2026-07-08T11:59:44.443122Z","last_seen":"2026-07-08T11:59:44.443122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winner/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:30.788Z","timestamp":1783511970788,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fi-FI\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"150\",\"88\",\"830\",\"128\",\"915\",\"763\",\"190\",\"699\",\"641\",\"546\",\"251\",\"858\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T00:29:42.072551Z","times_seen":17224441,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/baner-1-69b94e97d905c6.60422064.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.253Z","timestamp":1783511949253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b94e97d905c6.60422064.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/baner-1-69b94e97d905c6.60422064.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklcfqba\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gWvr6o0M%2FO0jx8qY7gaMZry%2FuBKag7n%2FMi9wa%2FTVB9sxm8nDWCqYhHPiTsPdIM4bEF2Z89W8LyHw6FAGW8yM0gGgi25l3lzmEZonZ2zDXaFVZDihbrXVCJDf4GOrDwyPkJomQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2dd54569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":733942,"size_decoded":735058,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"e96d9248f99b3f1187cdbd5b2eba6fff","sha1":"590aba6d1190f601dde5dcbbbc1074d23efe1dca","sha256":"af5b72532c801fd44efb952e58ea957d3b596dff5e123d0949ea38ae81adc4e7","sha512":"43eda43a19191fbce718e2708b8c4ee6481d5da388eb5dd48c909d9bcd017f02139ecb21ef68490bd9556d4e63deaf644b6cc26365b3e8fb93d40475b8078c08","ssdeep":"12288:THeq4BnlDDOzgsr38LbnFrloDc9viTq7PTFA8NtcP/cQq7sx75+aO8NAQEH+jjY:T+mjyFrlcc9q29eHg8EI8","tlshash":"80f433538a43c3273fe543b6f07b53209a9453b710cc2c61d0b8be687a2f9a769d5c58","first_seen":"2026-07-08T11:59:44.445031Z","last_seen":"2026-07-08T11:59:44.445031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-16.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.327Z","timestamp":1783511949327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzv3csq18e-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6yC6pgJ%2B%2FG1fs%2BEjMssrI2bWEpAbsUceuboI4nrO8GIipfYKBjB08RVXOQox951LU93MFvOtyX6F8yCcZ8fZIRH%2BjCH4wqgPo%2FUQ0%2Bnod%2BHxIKIWweLzJ9vInleBiQbWidJQQ%3D%3D\"}]}\r\ncf-ray: a17eebd34d8b569f-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1598,"size_decoded":1787,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-12T15:18:43.876286Z","times_seen":55,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/1.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.329Z","timestamp":1783511949329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzef7xd1be-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDTMRzbb%2Bdv4qwY%2FaA6A6CDXizxvP3rft3EkHuuVTe3f8mfft10Yql1%2BpKqtaqdSWmQPPs%2BVwSByO2tvtjfhqqjsjpRzOMzQ9bdmlHn3b7Q2YdpI8KcaXhXTSIeYLL%2FXkeGbwg%3D%3D\"}]}\r\ncf-ray: a17eebd35d8d569f-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1706,"size_decoded":1734,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-12T15:18:43.921009Z","times_seen":69,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/money-train.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.261Z","timestamp":1783511957261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/money-train.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/money-train.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kjalu145ru7\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlEpQJ%2FK%2FDBX%2Fmt7biMLQWZB3MBykRh61468bSk1h%2FfmbbXRpu96%2FUHmB6SC49%2BZfaNMCLeQyifQcGYg7J%2BmkLJwa2MnxBRmZ18zRIoqcJGlq2yut9Ys4DjvM6k2RsBOsMzK8A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04efef569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36079,"size_decoded":37103,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b1d2a44355e204bd6f73ac1a810dd18c","sha1":"d0f55a41d44854e05434a8bf94d09e3ace8afc70","sha256":"e4dfb8eedae689a7adb2b1284a9d3fb451a47d270aebd5d6fed390650c3fab12","sha512":"3473d09531a41f3d0a436cb5c90ec33d2637852e2d2ae2d1d98a54cd6e29a14c6537970b8abe34ece3fa34ca25867dcefeeca902b3ab3ceff5cac21f43a2d73e","ssdeep":"768:MIC98mvpobzpdS06SFIuGqkmYltCEAq4gPdoOk4:MRNvYza07dTYb4eoOT","tlshash":"bcf2f12eb69aba37c53c65e237544b1d0a9785b544d32c4f09b917be23d22831bc28ed","first_seen":"2026-06-07T21:45:09.927209Z","last_seen":"2026-07-08T11:59:44.447824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:30.779Z","timestamp":1783511970779,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:31 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdvTWY57haDCYSDPXJUqF4fi7GTiH%2Fnzr6bDAdecuCJJxntVEMSALjYGnw1UFv6PoyEO%2B%2BG4Tuoiak2e0qniVw1SjIlpkEtZsk3%2BoPHJXuAD86vt%2BmIb43SASDFzUZTtjYqcfg%3D%3D\"}]}\r\ncf-ray: a17eec596c60569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T00:29:42.072551Z","times_seen":17224441,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/liliths-passion-enhanced.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.269Z","timestamp":1783511949269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/liliths-passion-enhanced.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/liliths-passion-enhanced.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj9t9870l8g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AiDHojq%2FHnUds6VJjdqjlUnRB80WNjbe2Yw5dqOeoOjro40nso7DKzJd9iW3z9QfboVPp2s1Ol%2Bl6fPfAgrwgPqSJuxigDBtJ2bzywmGKCtmvJuzVvba2tYl4GZfQP42U%2BSAg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed5f569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27520,"size_decoded":28549,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"22cc8734205cc488c979a036675d132d","sha1":"d299c789c3e1d86dc744a71eb29e4ee96e38fbe7","sha256":"78deb2b5fd05c6eddc73d5ed27cde724461550bea4f82285d8fb618e1a55a325","sha512":"543ccb9ab18c7709f1f4311281c7cb1b1572f40d9c38a2fcc947b51a5a3736ed01534a0a2ab56ebbac55ee5239a6a05d035da5865facc22d02ce0ea28beed7d7","ssdeep":"768:F4K+/5lQ5IJqJIGoI1IseTqLXsgYqdpz3p21OjG2VK:b+xlQ5IJRGR1ZaR94pLkKG+K","tlshash":"27c2e08a66443e64d19c061f52e8ec1436e06e4cee36352e32d3f8400b7e9dcb3a6159","first_seen":"2025-11-01T04:33:33.169933Z","last_seen":"2026-07-08T11:59:44.449353Z","times_seen":5,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/images/hero3.8abd0bc0.webp","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.631Z","timestamp":1783511949631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/images/hero3.8abd0bc0.webp HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/images/hero3.8abd0bc0.webp\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5f57q\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFiXWihTFTB1GE2hfuX9t6vNKTlILb38IqjzLUkWITF8aP1bu4pE90ALKei6EzSQyjhJas%2FOSSTsnlwMz4Si5Z%2BOxDN%2F1R8nvaxrEI%2BdqRFFtdzI%2BPHvrajV1H5O5Zwk%2Bhy6zw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17eebd53da2569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6758,"size_decoded":5272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x760, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d28aa48798158135b67e00bdc0edf88d","sha1":"16848b8de4af6ca3390673b1b1ff65341336e97a","sha256":"17a792b9f42c5190867fa7396ac526a4ff678805a0fba43389af1a466312033f","sha512":"4ccf446b7b74bc80ebd809dfccfe4e9fc8443de9003bcc795b5db2a03fbaaa2ef08c5ddd9ed53b2624f7bededb13792df0e2a673e27ab11187cd873cc3c6539a","ssdeep":"192:Xd3sRlGEDhtPxCVGkTIiIApCFRq0Kn1/eOHK56/:N8/GENtPxCQ0IiIApCnmgOHKk","tlshash":"d3d195ecf1b18465eb2c1b56094a8af72d5dab2f003647ac7ab8d4b152ed50c1fadc1c","first_seen":"2025-12-01T07:25:15.285226Z","last_seen":"2026-07-08T11:59:44.450671Z","times_seen":14,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/duck-of-luck.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.246Z","timestamp":1783511957246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/duck-of-luck.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/duck-of-luck.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj6wgy5jmn3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnRFMcF4bXloW1zmnD%2B6lKvBdET270uNHf5i9EKpIDHyJCr0nyzyTVudmOaP7w%2FNRI8IKOXGPUlBwJRi0sBKHXP0FxAn84227qWFBNZdWuVAsqCHjXTQR6lz37F9IJcL8DswQw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04cfea569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29343,"size_decoded":30358,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"aaba2bc5a50344c01601e3b28505487d","sha1":"32416e97bc1dfc6a217908861a3855d6d9ccf432","sha256":"23caebd0fee3635fa446b4488b3c4e3234795162eface05d2712649af7dcb556","sha512":"6c44a3937216ff4c8c64dacd885730f01d334b42844ba0098f83936a9fe2d83a7aadd2070671fcce1eb2453de81ff45cfc5bcb450f3a888237a69e035f61f4da","ssdeep":"768:wcjbBLANvJkA0T7Q8/NdAfOT8MlfChECCPofZ:Hlcn0A2dAfylamCoE","tlshash":"06d2f165af1ff573fdfb051cb0435005f1639965f7ba22aa0480a7508f233b964ab4e5","first_seen":"2025-12-20T16:56:02.028176Z","last_seen":"2026-07-08T11:59:44.451644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:12.771Z","timestamp":1783511952771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:13 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:13 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sat, 08 Aug 2026 11:59:13 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwN4XpVI7X7GGH9w18w0nEc7N%2Fe04XZGjA3zEH3WZrzmcMhGAYdNP6NEDGJtXqTcbS2TKE%2F123PH9DLCCqQJmwAPcyU3slSxAYLKdYZ13m0Rgc9swDrF5ctRyeFo80HUEmOHPQ%3D%3D\"}]}\r\ncf-ray: a17eebe8deb1569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90,"size_decoded":1141,"mime_type":"application/json","magic":"JSON text data","md5":"94453d6ac024e40afc151b4a32a13fdc","sha1":"25474f084463257b344a90f2bc61b6aab90be960","sha256":"6b45b73b3aa691f4588fc6f1b93fb0688827b33e6e3fcde497e8345cc8e688c8","sha512":"552749ecfc3f1c539b590d29b56e809ba543fba78f463c7f1160ae0386719708312dcc7f01487d2286060f34ca72dd25646c7a0de03593933419d45b60fc98e4","ssdeep":"","tlshash":"94b012cb88507a45433b0300441730c891113993225414442a818c870d185020013c14","first_seen":"2026-07-08T11:59:44.454432Z","last_seen":"2026-07-08T11:59:44.454432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/spin-party.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.267Z","timestamp":1783511957267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/spin-party.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/spin-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kjczkfvjiy5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlVjrvrt3RufmiI9WmS1%2F%2B%2BOIXNiaVosZ%2BSyTvQ7eLhujXPeE4s3x%2FCmQXvgQ98tihZEZksSyuKbg5UdJ5D3UBzN%2FZPTHRbyCbPMbu%2FTo%2BYCaaBvEc7qvQADTSiRAPkRwyLRtA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04eff1569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24557,"size_decoded":25582,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2f01e887d230abb9cb0cedcc3e6e210b","sha1":"d146f51eb531de91021eb93e3da1ed50a60f0cb5","sha256":"47e969907bab843f4c2e961c490530b403145666379d938cfa6de5562234d11c","sha512":"2863715cdd16cd52b10c116c527184582bf0dfa89f143da6d8ebf9881d787608d6ac24a9108caf524c4aa1e03a34b12c487d81ec90df591d9448bb409aba83a2","ssdeep":"384:15rLAjaW6EOuhcO8c1pA2a5VYE8FWCDqjGqvbTnDLADlSals60jKLWIRIHjtiR:15rL6/cO8iW5mvFAGqvbbgOVBDtU","tlshash":"81b2d0351a286037cb0c6a34f407519df56ec299ea1e9e078287e98cd37d89d0a217fa","first_seen":"2026-07-08T11:59:44.455514Z","last_seen":"2026-07-12T15:18:43.472042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/live.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.304Z","timestamp":1783511949304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N33VrPTc%2FPlaNyCuiFM3cgLoVgx4R5ZCStGFmZJ1cdbW37%2F4t98VzFkE35pFPPxs7JnBI9AOPZbmClwfE6nW%2FLL9uCRGArGLOC9JihMkF80MqRcf%2BHAWFZYL%2BMGL%2Bn%2F3luWNbA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kl0e582t6j\"\r\ncf-ray: a17eebd32d78569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":1144,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-12T15:18:43.489072Z","times_seen":25,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/app.js","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.242Z","timestamp":1783511949242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5fzqo-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4hoMgBkWHy4YrOfuhM4GBrX9JXEx%2FHbOV09FhP%2B68c4dTg%2FTJVj2GznLNFcPvSboOsX0JM3n5V3kl4L%2F6ffb%2BuMFqy1CoU%2Fszvn63drG%2Ff9uR95Xh8OzlKibg5uh4ZJYXnaCw%3D%3D\"}]}\r\ncf-ray: a17eebd2cd4f569f-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46320,"size_decoded":8797,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-12T15:18:43.688768Z","times_seen":12,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.252Z","timestamp":1783511949252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3CgbakNCgMHiFM1NyMutVboJYa29n%2FavpQQCx3CZhgGHYbsLx4YNuQTkiC6g3wbt5jofrBScRTyEr3sP%2FKrUd9ecosQv6Xd3d%2Ft1ePe%2BMqlWMVb4nJg01WO1RFjDd2hZ3vp7g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkz4waac9v\"\r\ncf-ray: a17eebd2dd53569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-12T15:18:43.513407Z","times_seen":41,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/baner-2-69b94e980b8c59.25579239.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.255Z","timestamp":1783511949255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b94e980b8c59.25579239.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/baner-2-69b94e980b8c59.25579239.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklchzn8\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKAZggDYAoO7S0CugevdgeqF1%2BBJypjUS2Sx0RU4WUCCdQwyJYx3gyvPv0DUPr061TgGOLTzAZi2%2BUlnvfQde%2Bj%2Fr7L9UEciUhpYIvz%2FTgJm8s5caC3DgkIcdcsjZG7sLjtY1A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2dd55569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":839348,"size_decoded":840471,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"90eeaf45105d83c6dbf3020aa62c23f9","sha1":"4cc3fb5be9f27829c8f7833c416208a837699671","sha256":"f13c8979c94bac514c00ddd1eb17fb7d4c7544b2c20fb84f21ae6e9ec74c2325","sha512":"5dc79aa6ce87c2605ba9c6964cbabe01ab49ce98394c8d1b60778ae8d3c4175e83df2b3268a75928c006698276417949f4a55c4af8f903cff55117bf43a57862","ssdeep":"24576:/xd6tct1OPo3cMQ6jt0IoyHmhy5X1TGS79lm:JBtcQcMLt06GhCFTGqI","tlshash":"430523a6ece10738864d67e236c7b18d27c12f94abe8b05e5bc7510ed36fd9701039a6","first_seen":"2026-07-08T11:59:44.458482Z","last_seen":"2026-07-08T11:59:44.458482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-4.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.312Z","timestamp":1783511949312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzzutm819b-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvenxjP%2BZWHy%2FnC9BvFLC2pENM9ASQDvt%2BmqpOyuHj4wzYyuriBLEvnm%2BCb%2BKvMBdg0OqScBzb7EtYfpbMYZvBXPB5g3e7WzV2C3iyn1bXzXadDb1UPJvF2PdFPlsaR4urt4yg%3D%3D\"}]}\r\ncf-ray: a17eebd33d7f569f-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1631,"size_decoded":1793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-12T15:18:43.807502Z","times_seen":55,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/favicon.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:10.299Z","timestamp":1783511950299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:10 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyUOS%2BdCAHWXfjUt6rZESiGjdXYAsbBHOFAudIYFc%2BzqpMjntkgTjTkoNfaqj6G53ixwe7lyjRN2yyyjFS2pffCxkBi1HZ36yV1M4ZMiL4hkvPsT8LOFy3S9IaC%2BggErcwGMJA%3D%3D\"}]}\r\ncf-ray: a17eebd95dd5569f-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1607,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-08T11:59:44.460312Z","times_seen":6,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/bloopers.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.158Z","timestamp":1783511964158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/bloopers.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/bloopers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj56jvhqpn7\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWfO27GH1oJVQ7tDHBvncr0ASFsQs889L0zG7pWU6xfr2dcdC7%2FlqXCXVlfL35WPprcm8ny11wFg%2BD7P5s9XEio4m1AG9FNhd29qs%2F9GosivhBLlgJraNoV6tCaEWxvaFmmkkA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa39569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33235,"size_decoded":34248,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"60f3ef36f00de07cb5162e6e077dbeda","sha1":"0df6c04bc826584d864ef3b498460a047c934168","sha256":"23ac244952afa2b07b2be7cb3e8b5f16fccc521b7a59e01d7c6bc16199d3160c","sha512":"88ca249350879076f3174f6eb69659d0aec44d1a0361d428bf4616cc3a62287fe5fa205d0760e1ea08ec8d446552983ac60cf3924c4ac5e87c5b22af0bba55e8","ssdeep":"768:KisaKjQP/ItgK6tZe+xtp7mMfUsJR5Opt:Ka/It56tZbtpqKJE","tlshash":"6ae2f26aab4116baf71eea7b860f98f7822c90800ca355cf5c52673d87b5450cef1d24","first_seen":"2026-07-08T11:59:44.460927Z","last_seen":"2026-07-08T11:59:44.460927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.249Z","timestamp":1783511949249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuKkWTGNae0c9eOHQ3dSQmxnBiDHugVxvDJAWCd6t6aSP8iuK5uMGTiehBSLOGb6vMXmkV2diJq74EqXTFyA%2FGU4MJ%2BgNI9KzmlJTBdG%2F2glfoIeiXshKp4xpLrwlFHzBb4mzw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kkz4waac9y\"\r\ncf-ray: a17eebd2dd51569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1187,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-12T15:18:43.752917Z","times_seen":41,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/double-o-dollars.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.271Z","timestamp":1783511949271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/double-o-dollars.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/double-o-dollars.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj6pbqx9p5g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4s5qkuTOc4i6QtkDJBuQBTG5CH8VNuH0JH6SK3QKuyAEdZlsUruOZg6%2FRVrLD4Ovu3kCetu6gXlRf4l3xfkhmjjjuJoisvvfP3W6VbBthSM6217NlbaGoQiTFF0qfde7jo0CA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd61569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32596,"size_decoded":33613,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6769917be860d19f1f8c0452a45da583","sha1":"8bebc9b00e0dac1dc8b268c869907b7b8e3d8377","sha256":"de46c7bb50e2693afb0ec219210a7a936afbea2ede359e000cd57d483e75ef31","sha512":"562617e71061d7643537666c15a0d776bd2dda3e0cc9e51ff6701d111a5e86134021cce8ffea587e71c63686634c91a141cdd19108d292d5fdfc05dbd44e30ca","ssdeep":"768:96ZtJUquUzIJL1ybtDolBsLUVp+QEqe8Ufdl0E:gnuUzIJL1yb5oiI+QEl8Mr0E","tlshash":"6fe2f13cd1e4b40600afd95e56909b8d77c322a17bc324f94c67b228976f85acad2376","first_seen":"2026-06-01T02:18:17.461843Z","last_seen":"2026-07-08T11:59:44.462427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/guns-n-roses.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.272Z","timestamp":1783511949272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/guns-n-roses.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/guns-n-roses.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj8hmjzsdlt\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiNc01z3acAIn6X8QDfpIxeFufvuvMU%2FT9o38l5HGZG%2FMybwDff2UVYnhDqs9nmmnliJw5QlmjchvVW2FopO9mRL8hqI3XkmwFrqgLm%2Fr9bu0UxPXb9vWtFvcae5YlXgw5QBnw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd62569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17633,"size_decoded":18650,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ab383d349188b60f838d1add040451c0","sha1":"bdb296e9f1b5171b14afc910a4e4fb54df88787d","sha256":"5914c65021ec42efa3aae8b9dca95b4b4e3ecdaa672398a052bbaa827fcc21c4","sha512":"ebc99cbde02fd469f2920aeb8fc19c20e7c8b0be8c621dbb9c1999127f22eb9c1cdcdbd316b7e07ffc573ade75d23ae394bbd9a4ac85d36802465ca741b6c294","ssdeep":"384:cjl0fduhedtzLjuIVMGNINQKtRAkO6CBtmJnAitSuXsOCYxWsiDPu:cjOfdzzHrVMzNDtRAkJ4WAt3B77zu","tlshash":"5082c00778fe6a0ad72c0773ba47a672a5138c54d1423e0ae4e27f94e70eba51a0ddc5","first_seen":"2026-06-07T21:45:09.796287Z","last_seen":"2026-07-08T11:59:44.463552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-5.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.313Z","timestamp":1783511949313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7b21l%2Fcel7DZzFax99yhnxX5UkcxqVk2rcF3iZn7Z%2FyZ3Acz8YekC3nAgkJKWb5dihRALMXdaX8YkbdzKUanKYAxIceSUoCyOnNZapkkIWAIeDg3bDXrZ6sc9kOMr1iwGDP6Q%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kl028k10db\"\r\ncf-ray: a17eebd33d80569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-12T15:18:43.816511Z","times_seen":55,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/grim-muerto.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.157Z","timestamp":1783511964157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/grim-muerto.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/grim-muerto.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj8hmjzsp3b\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K720JkV0nPfo3g9khBm2FpV%2BZBCATdT2xrtYmmcsfvWgGgM8%2BWwx5lXsDwN8Zymi87qe1gBVJqrB3MQmKVb14gjgvsQxdUoDods5mPJBqKjEukomFa9I7aqF5rKqIE%2BgAJ8MfQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa38569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32519,"size_decoded":33535,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8d28dc1a2ab51790463066ef0925590b","sha1":"027f9f16c9acd5387806a608e3aa2382c580adcb","sha256":"62fcb2833cdafd326e04aef3cc2c7f430375c6ec7d356d4a4258b69dfcd7f4c1","sha512":"4e8a48f3084da12a6b8419f84376cacc635b30ac5197a4f14643c2e980f2bd7f400596f0659be8252a46f393a6ba6b4dbcab921e433e246201bd7990e8f0ac7a","ssdeep":"768:JMZAWNbKyGJaOio+k6/KMsuKjeRpr4qKaoUbyV:JMBggON8/HsuKq4XfV","tlshash":"e8e2f23329479b42faebb13078032f3a63dfc307dcb7996575f229895044ba129518a4","first_seen":"2026-05-18T23:51:30.730662Z","last_seen":"2026-07-08T11:59:44.465233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/four-god-beasts.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.280Z","timestamp":1783511949280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/four-god-beasts.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/four-god-beasts.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj7p1r2nlfo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PApZdl4YeJhGznoP6Izfo6kIBhPyIIdWvpKHwgZyETG5JYH4WLP4CzytYm5H0PGRURHk2oHNi9s2ibcP0govsBh8CO0mOf%2F8UzZTulGP3v3r0pqdN6uZ%2BPbXWi9BMyq7Vag7Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd30d69569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27780,"size_decoded":28798,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a7215026bf8f29ab5c4cc84027d22582","sha1":"211d7668cd232ee7d3462895f19ff52817e26b1a","sha256":"ba38339a73956267d0f2168aee097ce07ae88c47a8055c9d0d6c0df7b02ab347","sha512":"c8e340b00ccce7be4b163195b9d037242c1c7bd5ddfba15ea61d4671ac1c6a5132c8d52d491c208d51e3039949d83f50935f36db6c1136f359472c80390d1eb7","ssdeep":"768:pfB0ASwu6ziSptTKU4ypKiGWr61JLMWpf9JXghKML:pfB0NxGpt2dt26HYWf7gh5L","tlshash":"dfc2e0d39ef00aca8e1d047fd70c78165f702ea596429acbf4604a9e4bfc269168ff14","first_seen":"2026-01-03T05:58:07.501979Z","last_seen":"2026-07-08T11:59:44.466626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/cereal-killer.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.285Z","timestamp":1783511949285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/cereal-killer.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/cereal-killer.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj208nt73po\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDICAGGbKFgj%2Bv1Xmla6Br8gNmvONYPty8epgJu6LC4%2Ffrrf41rphwuUe%2FCDxuLOlTwo2vmTz8lkOUCtPHq07jmBgWGnidjbFiAKCpRALGjqxM1SrwsgIHb1%2FO0BSCH9XpUdiA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd30d6d569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4812,"size_decoded":5834,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"b1eba4aca2d25843bdaeea905e3f84f1","sha1":"74378f4e6fdc8a03c1597ede7a2d71e9deec091b","sha256":"aa8466b70aaf76625d07c298cf3b6e9515cd32fc51f1f12f4ebe55e09bc00a55","sha512":"fa59e8853811a8d2b9d1a8c15c53725c3096b5ddde4555cc7949e280e693afb378899a9335016739ee4238d46045af149baddbe2236ab669359ebb904bdb13a5","ssdeep":"96:PKb3OxIyWTq2IgsWbpqjtvP1CaWKfWeQIEnz5HRgLZIc7m6:Cb+xIyWrIg4vP1aKOv/z/ex7R","tlshash":"afa16da1b791a303e43e7532a385f7d3bf06ca9d2644de1b18c42d34872d0f64e97696","first_seen":"2025-10-08T14:20:42.80278Z","last_seen":"2026-07-08T11:59:44.467975Z","times_seen":3,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/darkside-hooker.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.297Z","timestamp":1783511949297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/darkside-hooker.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/darkside-hooker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj27dv1h4ay\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0J5B2DVZxhb9do%2B48lV0zV6JzeGYBhBtQfHw3tPKBoVasTBc2kNRE30MSyl3w3hgh9X7GFd9B5hnBhHOSZVmOXpkiMv%2FuYEoXaVZzhpztqT7d%2FKLDs%2BGLc5%2BzndrPVx6Sptaw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd31d73569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5578,"size_decoded":6604,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"0da7e785b0167bfbf17fc9884f8baba4","sha1":"fa5b4954a6936c7bb4329bedb0bd5a8f0928053f","sha256":"29ae687b8e1d01f391cda9afb399bfffaf1ebd9daee88c0ff965132c8e9db710","sha512":"4d439d2f304a2283845696aec89ddaa477051895aec05a05e864415c0cf22522a19ad51dce1f03f44d345c205d0c3f37fddc8bb58ffedfb11bd6c3ed0d9cff6f","ssdeep":"96:9msbWrLltabqFjU2y06w41Z3pRQPALJ8vKet2l9RPID0LMCTx3TEx4+Yio62:93bWbaYUJ7RAALiKK2lfPQ0oqjl+ZZ2","tlshash":"39b18e33d6894c12e92f703ce6389418a21bec86e3172e736b505d1d1f5f65611c4de2","first_seen":"2025-11-17T14:16:40.646511Z","last_seen":"2026-07-08T11:59:44.469221Z","times_seen":4,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/fastlane.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.303Z","timestamp":1783511949303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/fastlane.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/fastlane.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2ej29r51s\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1O%2F5PH8YMlywSxKKfMeqQAHgefcYgfSlbPk3ZnFNZwgL%2FRccEba%2BNevRCnLPzS5fFM8Tg%2B5I5e0YKvvaenNqcdg%2BD55SFxJOFGZGV2JRenSHrUUGAD%2FcFD5IBhinLR0QfaLC%2BQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd32d77569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6544,"size_decoded":7567,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"601cb2a045f1acd8f698088fe7bd9b6e","sha1":"73796434e1a96433275656fb94ca4af83e87c285","sha256":"41e93a5834ea6616c691a0dc243f3a8fafeb8c33ade0aab6aab67e49c1e8cc06","sha512":"f9dda7402c6a15f31c5d6a3829be0a83904bfc38651e8f733d91f48222325d3bdddd03910afa5c76ef3d48e1ddaddf1bcc1ca48733a6d95fc744119eca270141","ssdeep":"192:cITQhNp6hiaXvjJPpiy7JKvPMkuot8qQ7:ceXbBp37CM067","tlshash":"f4d18da07b549812dc6f97f492cee9828b024f62a0e250937a26c1bc177f045d9c8fe1","first_seen":"2026-06-02T00:44:56.593503Z","last_seen":"2026-07-08T11:59:44.470294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/18.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.342Z","timestamp":1783511949342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkz04tgt2u3-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRziorq3SmkaStraszaIAcxxeUZYCKncsOWFHPR46CZ2GYqBiQuUguHOQqo4f25lavKo%2F1TO746rz1gBxOtYamdkvPnNlJnQnXF0bC1NeDEbhgrhEf7%2B57LriwBVCP2d6Xdlag%3D%3D\"}]}\r\ncf-ray: a17eebd36d97569f-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3675,"size_decoded":2237,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-12T15:18:43.835852Z","times_seen":63,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winning/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:16.787Z","timestamp":1783511956787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 109\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":109,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\"],\"locale\":\"fi-FI\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcVtaWyhG6GKSxqkJDAnPcf0RY4jhmpHVdwU%2B50IeFtAUB4cIUVdjMinhCw9VNzbBgPZS3e4iVl2QUVw3jCHZlakxxVE89PMMxhQMkP7jLOrs%2FaLYPXXUdLc9x%2FBV8aenN5tjA%3D%3D\"}]}\r\ncf-ray: a17eec01efb8569f-OSL\r\ncontent-length: 636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8692,"size_decoded":1623,"mime_type":"application/json","magic":"JSON text data","md5":"d92190c48f000fefe87e1f56de2382e3","sha1":"5baf3ec6752dccca21afefbee90484995b7be8ad","sha256":"40d6d29cc4c249a56f8eb80c8eb98e7ee31daf36edee71f5e8d5df26a9bde161","sha512":"49118909a3208e32b425fe95bd7db135900419ba72e8ddc213ec806f97edcdc7e5a2d82f0fc9034d09c09d6eeae270fff6a04cfd2c796c3077073af22b906173","ssdeep":"96:QfcfLMEfoMfLttfUffLWdfbfL4rfofLtDf+fLZLfhfLLDf4fLPffTfLH2Af9OfLU:t","tlshash":"fd026b65a972d73b76d360e0ccb3ffcd1064e961a42c8874bcbf19a2d3228546ea471d","first_seen":"2026-07-08T11:59:44.471965Z","last_seen":"2026-07-08T11:59:44.471965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-3.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.310Z","timestamp":1783511949310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzzutm811j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9sRs%2FglIXNTx2vs2rDLx5JmQjN%2B%2F6EcZX%2BFcE53uE%2B4RTVTOeZnIftuMB0Ldfp5V1%2F2VvM73eiuU4bBV7RWVpy8FjAnVKbSrX68Z03NDhfsAoo%2F1unBeLu3hEMUIGh%2BYRDgSQ%3D%3D\"}]}\r\ncf-ray: a17eebd33d7d569f-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1351,"size_decoded":1733,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-12T15:18:43.469902Z","times_seen":55,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-8.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.317Z","timestamp":1783511949317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl04mafr16h-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gOOiuiwwi3R5tRAXgNGGzr%2FL0uiVsC9PpSRyTNG4awFjeV6UupELyf26YZFgF4LtGrkRcJSd9OTgfVy%2BhL4Z52%2BoP%2FFCIdROYi3r6ZNIfxu%2FfG%2FcYhDmpyYQuEzPpnFBagLlg%3D%3D\"}]}\r\ncf-ray: a17eebd33d83569f-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":1717,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-12T15:18:43.710575Z","times_seen":55,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/live_icon.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.336Z","timestamp":1783511949336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl0e582t1y5-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjcFWhV4oaGMG%2BYMEqODisd0EeWFcX4BIKhC2crW0Bwo%2FmJ6qk5tmuep1Ic2hwn%2BN%2BtvenJVTkooSPOTyjRaASjVlpE6b%2FLqYK65gL00afrdLfbWEj%2F2f54o%2BFxYZRECMBumkw%3D%3D\"}]}\r\ncf-ray: a17eebd35d92569f-OSL\r\ncontent-length: 925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2525,"size_decoded":1953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0c05ebadf4fda67faa8b90d5424c5","sha1":"f81ff1ed17b5ffba223d3a06d1a3628fb198cec2","sha256":"f8dc8454be75f1a4ce991b485bbb1f1650428409c820b3d9b8540fe5a538dd45","sha512":"ff6e2ddf5f392b184b7d49f702e314ff8cf3af53e7eefc4150dd84a863a30eb627a9dc6f0174ed3710e72ce7ae9831f52bac374779670d653e3d78914bb63616","ssdeep":"","tlshash":"4d510ef3e2cca2d19003d7e4cc079831b59b6cf767daa3cb8272ed44ab30165598d865","first_seen":"2025-09-23T10:56:20.264777Z","last_seen":"2026-07-12T15:18:43.483834Z","times_seen":28,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/the-final-countdown.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.113Z","timestamp":1783511957113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/the-final-countdown.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/the-final-countdown.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kjdndrz5r0m\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9laoCOMhWKjVZ94%2Br8i6B2zmQ9haw7Dhq7YQOPr19bW9FacI0zVPeYpLpsL0CqJPgYbY%2BoW4adl1nO8r9k0AwNMz5GfnTVuWZmtYG%2FukjNcRYUJ3IXL6Tp%2B6W7b0%2B%2Fwy78quKg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec03ffe0569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35014,"size_decoded":36044,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"afa43297a11f64cc713336f3e2a1a35c","sha1":"05a80f9710129c3040fc37f8c3080b977f786f3a","sha256":"276a708fee3ae7355a42987b563391aa9a5a32b5a696779bbef33f660231b93e","sha512":"cdd027ee7896d655cdebd8d6b3e16014d3d863d7fd5003302dfab54f3b9c625d67ce77825d539395536684f98fd4ece1519169391e0732c679124f4e715cf6d7","ssdeep":"768:F7hqgkCg11Diu0ZaYFY5eim7vAv4DAMaJWS8dZ7LrHD1pIxykaaeHnW:ZhJkCAiX9fp7oQhaJWRDn/1pIMkaae2","tlshash":"f4f2f16f75bb561dc23c9966cbfc3b19e997780a12970707ade6407c338ce40a061a3b","first_seen":"2026-01-02T03:19:50.95323Z","last_seen":"2026-07-08T11:59:44.487195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/app.css","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.218Z","timestamp":1783511949218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5f1abu-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o26T539iFMAst%2B0kBOKZZ8D4CCnEQEdKlpM65%2FytlbX%2BQgWG0c8fAxd5AigcjSsPxF7HtLN3G2LM1sdT%2BW8lAAa4sq8sR0rLDFHM%2BWYHa0RNxJsLEj7Thb7gs1KHJUHKqHAk1w%3D%3D\"}]}\r\ncf-ray: a17eebd2ad4b569f-OSL\r\ncontent-length: 10730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60042,"size_decoded":11775,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"c27277df0e7db3001af83ce930d1db1f","sha1":"e11d581b594db248298df38dd5b64dd917c83648","sha256":"128ee951df73f0c5b3b861f286bb0bd4773b15dd0dbffab7ea0c5875c7543e77","sha512":"d863820e4e5f264b90df499dc68d75d0af707c19463fe0104a36e40da6e583abb72022d95a7b7c1c95697fa8365f1a72997e37d1734528d421561c8f79a4380c","ssdeep":"768:Lou7yeE5m0tkZAcsnbTy4wIZge4sWxeXSJXru:LvE59kZsnbTy4wje/5CJa","tlshash":"4b4364232659603cb03fc565a8d0669d312dd407eb6f57fdde62a174c9ca2e31b32b88","first_seen":"2026-07-08T11:59:44.488356Z","last_seen":"2026-07-08T11:59:44.488356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/penguin.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.284Z","timestamp":1783511949284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/penguin.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/penguin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2zynym2nb\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7Q%2FaNUCOyXRy3G2je%2BzObRE%2BKAWejy2I5voYojEUjrgWkBsTKcmH6%2FuXQML%2BjFIbZnQpIQzOY3l9rTONPcbB%2FYhe%2Ff7rGzSkAOhGTcc2Z2r%2FfbRZx9VXZBAEejr0yxM%2BUxmpQ%3D%3D\"}]}\r\ncf-ray: a17eebd30d6c569f-OSL\r\ncontent-length: 3320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3431,"size_decoded":4365,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5ec477ed722f605e8da89cbc9f831d08","sha1":"be1565f30630332c2cd155e4f2d41f4189b08c40","sha256":"2019338984f9c2b6e81250b0f4fa8498f74c4396843495bc1ee0c0c8f51a2cc5","sha512":"2cdda29f9cef67422cc1f88aa53b3e0d5b3b603da0e3b32a86503651bb8710d9e76b080b10c86d35dfe3d99f77d56cff4250c7fbaa060a9463c4f3b011503e47","ssdeep":"","tlshash":"f9616d6f4b710a11d23ef0b8046d4a70ad40ea793d204bcab459446cbbb98129ee80e5","first_seen":"2025-11-17T14:16:40.5715Z","last_seen":"2026-07-08T11:59:44.489454Z","times_seen":4,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/molli.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.287Z","timestamp":1783511949287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/molli.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/molli.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2stgqb37y\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufzw8ndrCy2UihbCyad3dGBzxrmfvo33N2aVU6%2B%2FzRape9vLQGAcLkN8hm0nooUxtvOnZj4AeUapnyDdT4KgEZMUSdZvORpub5rWzOQEU2A7KhOCWyF1u6glExUc%2FSbTXcVnqA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd30d6e569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4174,"size_decoded":5139,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5a1afdcb57c99bc9e7d2afc2770a023d","sha1":"b9674fc89ba0204fa91b2e01a1cbadcb4c731ad5","sha256":"b4669f6e38f2e36715868117d46d80491f8c6f995f4d9218403e49b68ef86966","sha512":"8eaddab4fa6dd904cc8e1a2876aff428365c08085c5f7d7300f4d7ebfcf35889b5373cb296ece0619b98dd5438e9358ffe966a1878ca40bce0ae9205292dc2f8","ssdeep":"96:KR8I7ZafHgzB4XzEKMaD6ofLH/2bL9Ll55TbIq8Z:tRfAOXzFMaOojf2ZW","tlshash":"81815b263bc00413dd6d62b05186fad0e711af51377ced9fa2b16a0a7f8f21a4608e99","first_seen":"2026-07-08T11:59:44.490667Z","last_seen":"2026-07-08T11:59:44.490667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/jarred.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.293Z","timestamp":1783511949293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/jarred.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/jarred.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj2lo9i1601\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mK50GJMjB2hvUCnCgCULlIfjG6rtjJjEGHrvtdKH9zew3DrH7lSCa7hxHLbH4Gp3TzIKFEgp4iUi8hbabuxxWLeoYuXVO4OJldzgV2JEC86MnaanRKPxPpVGDqDTeynCzAjdlg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd31d72569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7777,"size_decoded":8784,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"7c11fd6bda74e91bedc294f087ae28b5","sha1":"818dcd045dfc92e43a73e2e994e7e3e087135e27","sha256":"fed68893c7763f78311a1dd898003357410768f4d59c6d031dc35c470eacee68","sha512":"642d7b271ad8aa72f269a00121ac4265e2c04123b5ec8ee95b54b8c978ee111c269cb4d82ed0c20d1a7d6446f6c77c9327a8b66e521c3c32a7ccd7b52e8a0a2d","ssdeep":"192:tGxBr0LkZzishqAjPzhCeI+n6d8A027MrZcn84e3uTHeQK:ty2meczDI+n3IMtc8pu7eL","tlshash":"29f1af3e518af06ac5ed46770a9d20726b3a46214b7b0fb3a9f11d788f772c54002953","first_seen":"2026-07-08T11:59:44.491617Z","last_seen":"2026-07-08T11:59:44.491617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/close_icon.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.337Z","timestamp":1783511949337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkz9nr3v1ih-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrhIZbYVOxfNpg%2BnO5mU8T%2FYaTWyovz5BEWG7RFaurCwJLxBNX1MwMj7Y%2BSxvi42Z7RwRx2ccBrB%2BKKY9u3HLBSRr42sJY0mrPeVYAPHaw%2B9wsw4WY4JoZ%2FjqpBIB3f2u2Wiag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd35d93569f-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":1876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-12T15:18:43.565109Z","times_seen":65,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/be-gamble.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.341Z","timestamp":1783511949341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkz4waac20ob-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FH3WZfPz2ZQqvNtd7HFl4Wcq%2FfHEfJx%2FrN6nhIIXARksiU%2FbzdwJRbEFCwST2gPuxS%2F66Nem6jsc%2FmdXmesUwOuBVOUcI6iHGOEm7%2BrkKM5tx9MjaZSa0ElTTF4%2BVIv9t1qfxA%3D%3D\"}]}\r\ncf-ray: a17eebd36d96569f-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94187,"size_decoded":44551,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-12T15:18:43.586672Z","times_seen":30,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/banner-rectangle-69b94e97c62299.67320221.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.642Z","timestamp":1783511949642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b94e97c62299.67320221.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/banner-rectangle-69b94e97c62299.67320221.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklc3eu6\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpPhFQT9fimkC0aE1IfuKLw68XXH8NLWwFxhHStSJccotoolHY1TKaFO54WFIWL00KP0I9Moiydvn%2FqCpwUlHleixiAZjzchLvoFi9MATDsapTDgqyAk%2Fq0DRmBrqWZpYgF%2B8w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17eebd54da5569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159198,"size_decoded":159638,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"a24ce09564c81b15928a74252318bc63","sha1":"3703862b4d3f5c3da29eb7abf3dfcc87ecf7dacc","sha256":"9eed3bcba5654429e9fc0b2f47664eb4cb0f402a955f6356b8eff3ad83c54df9","sha512":"d58bbc02fcc7df452d33c5ea96463929d04effd36f5df874bec9c6144a709c57f323132133e8ba59f06849d16838535adf32612756392fd2f14576958d973cda","ssdeep":"3072:oRp2OZz4QXeNQwdrK70XygKGiJhjjdYIAmRNNEOwbmNyWrwvgdbrZNSCc4:qTXVwFK70XXajR4OAOamdbtN1","tlshash":"99f312a8ab3173623796c256d5333ee7e521d79893edb804f3e0801c867d7693066ae4","first_seen":"2026-07-08T11:59:44.494255Z","last_seen":"2026-07-08T11:59:44.494255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/alley-frog.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.231Z","timestamp":1783511957231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/alley-frog.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/alley-frog.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj1qpq655y2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZkCkSPQXCbq%2B1x4P6lWhtwMIjBCXWjYIG4qYua84x%2Fybl3w9EhAD6QbZPWv5gtd901fIThHU99yVMQgPUoVh%2Bt3SrdgJE%2BqM58IPhBeCEIT6z5QpaURdjNW6r0WT9U4Ssqf5A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04bfe9569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7706,"size_decoded":8725,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"944f583b27765a6db1ed40d85e173bf5","sha1":"97364701de9153b8d240195eb2a67f794e861295","sha256":"51711b3862c0014f8f054e24ba9e283defe3658594dd6354db0dd7a009e50412","sha512":"e05a93575864fd9cbac84398430b1e127f7dc2eaa562310766c4476613d390540b932bccf1a7473616651d633fd569a1b6b41454c9090e345370e887b1d76bd0","ssdeep":"192:koCxatfQppfb1FXS+e01CAqAFfhU3f8aJFjXm8Akc3lq:kkZ0pxFC+bMA5UN3Xulq","tlshash":"19f1a023d42084a4f9eebe7e0ac8f05177541797c8762f2e3968459523170dfcacdab4","first_seen":"2026-05-04T16:18:30.919585Z","last_seen":"2026-07-08T11:59:44.495517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/good-luck-40.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.263Z","timestamp":1783511949263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/good-luck-40.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/good-luck-40.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj8f8tl1k4g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgWTrqeehOZO2xbNwPNuNuYqPMN0LLz1%2Fx1NLMn9TPBBljxFF028oIoDckGkKDfyGaEAUgTVKGoQsfcgXSo31djve%2BUI1Fzcm6C3%2F%2BJMKH%2FA8pT7EfxYil0lh4g5f%2BaY64uiYA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed5a569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26080,"size_decoded":27103,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1d1fa0140cfac59c99d00be93700e231","sha1":"d511bfea462c3e0320a92074a043407bfabe3ab1","sha256":"be0ae23a5b1cf853e17d6be3412c8c5f1c6cc4dec60774c9ea3bd7f654e3e1fb","sha512":"0eb6a7c30d44a3751ac984ee43bfb25b8a96555c939cdb632d23ac9a4d10efe1fa693c40caa15dff313ff20dcaf778221edd91f4a8d38857a03a83daa06cc4a0","ssdeep":"768:L8y6KDKERkC10LVnhQ/7HGewdDbCHR24Bza:Yy68/kR5na/7HGewQHRbs","tlshash":"41c2f2480bf3cbeaad2f45b2279cdcd53b455d66af8d7bb0a6502250833154a1e44f63","first_seen":"2026-04-29T22:47:38.003832Z","last_seen":"2026-07-08T11:59:44.49703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/wild-pearl.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.276Z","timestamp":1783511949276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/wild-pearl.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/wild-pearl.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjfdaumxgew\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5o9%2FVqDwOmYDK8fla4RcDwrM6MiUnTXuaOiSGedMtIQVx%2FzB%2FkMTPxGX1ARtwvhe2u34JS9zPPuzUf6T%2BkRXEBGxyGpviYftddxMJJJeOdHr0G%2BlftAk0I1%2F8O0bNkJW69kgmA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd65569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21272,"size_decoded":22293,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0954d904b1cad69ef9b5628cf2004db0","sha1":"50d045fcd0516dea9df3a3ff2a5718429674258d","sha256":"3d60ffa2e5a8f521247f16368c457665e874c586f8c2e9d9d4a42261ab2d4a74","sha512":"7d9dc9e2afceffd8a61803ee70d7768244da3fe6bc6171f02bf6f13181ecfddee867bf654c4262311c6895c084372876e2fc4319114b1973bce8861e9a9f0fde","ssdeep":"384:hHZfphSuJ2STyQJ3+8tmQlGrG3vE3vqTI2ZoYLK0dUZDQZyKVNN0:vrjJ2STlJ3MSE/qE3ceUN0","tlshash":"3aa2d15f00a92c7e5ebf7b76e5a003be1604e0ac34f51be952712a401abb5c1a8f4133","first_seen":"2026-06-30T02:37:58.851427Z","last_seen":"2026-07-08T11:59:44.498144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.811Z","timestamp":1783511949811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5fhf-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHVtz3%2FWeFeB85stGad0BmbCtNHGeN7%2B97Nl9%2B0Kyn1%2BdXPmgpFB17KzoqRFLbxVVlKyhMM3fq2NN%2FnrYiQzSyfkXX%2BjpLvpLREoPvSkKVVHOUy2SMOgGIHMb8rTA0cuVk39Jw%3D%3D\"}]}\r\ncf-ray: a17eebd65db7569f-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-12T15:18:43.81926Z","times_seen":82,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/banner-popup-69b94e97bce533.39803381.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:15.776Z","timestamp":1783511955776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b94e97bce533.39803381.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/banner-popup-69b94e97bce533.39803381.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:16 GMT\r\netag: \"dh54x8f4nklc300p\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hehfVDBxCvcgGuKpIEj3kkoWeeuSQfuSLVOf0IId6zBk0gv2tiy82xyM4fphBxMGaGuB%2FkXsgs1N%2BRHYIJmc40wvnB83agIe%2Bu0PCeBanveXJoLHjkTCmPDHNKj3YZrT1lt1SA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17eebfbaf7c569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139993,"size_decoded":141057,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"d18b8dfe2628d289c329cc4d2b1a3dfe","sha1":"a607ad38856baef908cc546ec8661806164e4b34","sha256":"bce46058570efbd41042d62c18d56d9a630723b3f5eeaf411182d9cb5dffdca3","sha512":"2892c8bf81f70bb262269fda0ca1abf922ff290019bd28de62351cce707faad7ecb85d2fb0132791dbf401aaa8e462930a84b78cfc6612166c064672a2c1aefa","ssdeep":"3072:/PFK59J0R8ghGA5vhEmsq2I+8/fIxnGTLW8X7KClWuwJWB:Y59J0R5jr/fynGTSC7euw2","tlshash":"bcd32220d4531ef04e3258a92e5d758871bb9d4aa0d40a8be1bad0b1dde04fa9d835e7","first_seen":"2026-07-08T11:59:44.499823Z","last_seen":"2026-07-08T11:59:44.499823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/halloweenies.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.273Z","timestamp":1783511949273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/halloweenies.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/halloweenies.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj8k0aejluh\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1jJifwPLZWb3WKxGVmuox4tkgQqCrEWX0PZRpppPJqUUwwrVdrFzqCm1aZNrmUyUmVcj7du03XkR4HD0Y7z%2FgVlZRCM8f1i184aYKLCGu%2FmOizMH6aQlKIAuP%2F1NPEf%2BlH3mw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2fd63569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28313,"size_decoded":29332,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6a785179f248961416ed7d04aca73818","sha1":"f798ce23896a36d490e0f6c12ebfbf9d4c2e8079","sha256":"56f47a57aa5592aff1f0456b9e89a0c7cc7190f44b05771a20fd724368acc129","sha512":"dc5164adfb29a1b56e873a5f8315f6d260f979b28d7aa4903938e3ba02de8ec8cf5a25608f1c9732d28141fd4e9b42a6215789e510c22d68311cf00e90b5c0d9","ssdeep":"768:zrAIDg/D/qmmh7G1buJewCLMZV21qqML8Xr9cqjNR0:ZDmxgTdCoO1hML0Kk0","tlshash":"29d2f12a7308fa88fa8ebc5f5d0e6570953f202bc4bf6037716824dd73a5ad2954b760","first_seen":"2026-07-08T11:59:44.500866Z","last_seen":"2026-07-08T11:59:44.500866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/avatars/bone.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.298Z","timestamp":1783511949298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/avatars/bone.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/avatars/bone.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kj1vh6zo4v4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BEy12mM4pqz3Urt3iLqkRdgpaeKUN%2BO57LcxSKyLrdp7jbXgrkcw6tQKJvi8b0KpMUrLkMbljJOxSWGJlnwbbw%2FaL7W3i%2FcdtmBPQmcxM3YE%2B4vay%2Fe7cggaV4PgVciZX5naQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd31d74569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6304,"size_decoded":7321,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"7b332b85768d3b83b9cf10e11d16058f","sha1":"8e7918419554a3b8019577568350f3f61c33803d","sha256":"445f0b9099e3a85f2f0f137dddec78ab53048891566646a6b0dc3b488de831c7","sha512":"ab6cb30e0d2ac9aa255fe5c84ad83dc20720f33aa0bcbf4232b6f9a390709927e49274e44d619346e7bde568ed6dd843583f03655d6b1a94f94866c0f9e3a05e","ssdeep":"192:6zetPkM8591sifd6ZtzmFiLG53c2b7lHZ8xdnKF9:i0Pazqig0FV5h/ladne9","tlshash":"63d1ae36aff23458f13c93ba42d00161d643bb54db6b5f95342ab6851f3f05c6408388","first_seen":"2026-04-08T23:08:59.792836Z","last_seen":"2026-07-08T11:59:44.501743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-7.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.316Z","timestamp":1783511949316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kl04mafr1f9-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QU02IoqCfRYBmhPPNVHTPBBBnxmpj3JsONjCuC4seOleSc4sNtKd037O904vVrvov%2BEir7Iw0KhDqVFF%2FgWtwJVPp94EU3HUlM9g5Yx47maGHrN%2BsRbwcompimHUXvWSmisi%2FA%3D%3D\"}]}\r\ncf-ray: a17eebd33d82569f-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1845,"size_decoded":1896,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-12T15:18:43.498877Z","times_seen":55,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/2026/03/banner-jackpot-69b94e97aefb03.65230660.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.650Z","timestamp":1783511949650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b94e97aefb03.65230660.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/2026/03/banner-jackpot-69b94e97aefb03.65230660.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh54x8f4nklc48ce\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VuL9XXYXdBGoGuny1Z8DB%2BAHg4dV0f6YOcbIlWlLgmEDtV%2FEPm5ezMCB%2Fz4EoZMZFDDcMjLSNh4Wwqn2AmCt5NxPi5JKj%2BusZ9%2BZIGphui4CMVPfI5ncs0lCghYCcV3O1LyHcg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17eebd55da6569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197438,"size_decoded":198508,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"26bc6352c5b00e722596713a1539a26e","sha1":"09d7ac8180a265a88fa84580ee6a277054d122c7","sha256":"2e8155a527362925954a64009d9942fec2b8c508f92dc67cda1371ef81ab885e","sha512":"c75a2f5186fba021a22fb85e35b8d5b1c0efdb73bd30bf52a3923ed8015bcbd35097c59ef36c9b415c047d9c0d17889a41d0b4e5fe013b3eb92ecd7c9f831d83","ssdeep":"6144:mC3iUfZLSA0j/XunqJwOE2nNlTUqZhBGeHxj:mCSqNM3JFNxUqZDnHxj","tlshash":"ca1412648ebfa0b604b91864f00f8e7d1ac645c1055f75ce007a29eaefb24fb994b57c","first_seen":"2026-07-08T11:59:44.503849Z","last_seen":"2026-07-08T11:59:44.503849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.814Z","timestamp":1783511949814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52n8jo9b5feb-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:55:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTa6IvRD9CU2dqKQvzEmlcmmPEjQqA91SXN4Q4S%2FHg3sdVpX9n8SDtW2qWaM6hCircqlfbRs3O3TnNru9xFqIvALsGvvTdiZrM%2F3VUrp9Iag9xV%2Bwwzg27NMt4wFPr517zfQBw%3D%3D\"}]}\r\ncf-ray: a17eebd65db8569f-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":1290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-12T15:18:43.52101Z","times_seen":60,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/game/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:27.780Z","timestamp":1783511967780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 131\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"exclude\":[\"1458\",\"1085\",\"1149\",\"1479\",\"218\",\"1717\",\"1228\",\"548\",\"828\",\"244\",\"1875\",\"224\",\"1503\",\"601\",\"1538\",\"320\",\"1751\",\"377\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:59:28 GMT\r\nexpires: Wed, 08 Jul 2026 11:59:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nqu%2BWaegjp616RQC6A9dcTepZ4Wa%2BglPNojx1xPIC1nt%2F0Gk9lpG7Twmz6JS6ke%2BinMY2me2m4c5rUAQi5E0HsnxpCBrh7rgIKoTlDu7u8NAf6P13O1nmU4QrL31MJkoCanWQA%3D%3D\"}]}\r\ncf-ray: a17eec46ab15569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76,"size_decoded":1030,"mime_type":"application/json","magic":"JSON text data","md5":"58a000c7269d6b26f2f683ed7722c0d7","sha1":"7a9d9c4407e44766ec9e8f3346dbeb7776499b3a","sha256":"94c3d8465802dcba60709a55af172bccf1b298fdeb35127fe85f99354b19021c","sha512":"3a6f12eb5fd212576879c6138a2369d96c7db9890fac638a51eb0d4d9bb49a9bd77d55b8bbae970ab407f3333d1de3fd397861a8af48d0b6d64df2e739eb1bf0","ssdeep":"","tlshash":"6ca011afc00008ca82330a00880ab2c020300aa308a0ba082a88cc8008a00220223c20","first_seen":"2026-01-12T23:19:23.822844Z","last_seen":"2026-07-08T11:59:44.506745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/ajax/winning/","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:30.785Z","timestamp":1783511970785,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 109\r\nOrigin: https://rainbet-fi.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":109,"data":"{\"exclude\":[\"1700\",\"114\",\"1938\",\"477\",\"1996\",\"2448\",\"248\",\"2008\",\"2472\",\"761\",\"549\",\"1444\"],\"locale\":\"fi-FI\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T00:29:42.072551Z","times_seen":17224441,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-14.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.325Z","timestamp":1783511949325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzv3csq2nr-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFCtV%2FmzVhVyZ2gt0MHG8FRp9n0FJ8s8rimBawOapBUDZazMgRYfDJxhNVPl7IKm50P7Zzv7GEQ3ZKtN%2BmbNkxHupfbhFln5bxGprvM9WGFJ1ymP8hRO%2B27ryHpxwaWN86ictA%3D%3D\"}]}\r\ncf-ray: a17eebd34d89569f-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2406,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-12T15:18:43.875678Z","times_seen":55,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/3.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.332Z","timestamp":1783511949332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzgsyc511l-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3LWF5S0gxMNMwa38g0UheqCgByO1BupgpzG99F%2FBHUyktsmmXwEDF%2FVXHR2wgSFsN%2BRA%2BEnWwQ%2FojYLdrbFhfv7wwhvhTEAAUoYpeElkSKWTaPZBTikyZ4JrnV%2FOFBIKgzgsw%3D%3D\"}]}\r\ncf-ray: a17eebd35d8f569f-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1715,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-12T15:18:43.661585Z","times_seen":58,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/dark-thirst.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.165Z","timestamp":1783511964165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/dark-thirst.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/dark-thirst.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj6b1cgokg5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ezk04GYQz%2FcjI2tuLSyMXzuE%2BvhKwQ402jWQUBA%2FrQJYw7QXPi7wNDMnEKlxQIWFmvq4u0xYaLVzJsqsRnLJuXCAIg7tOnulFnS3C5gC45%2FDYipnI5l9kP23chae7MZ4967KA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3e569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26501,"size_decoded":27519,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8ea5a42b07a7b1c0471f0857c62ea8bd","sha1":"a76740077cc064ab63d75b97fd1f0e1f05b9af62","sha256":"21dcabe8f17922a8cf2bd6bd2eb8f0661044a5f426d97b30d5c4cf8667234a44","sha512":"4e226bd864632d00d3a0921f0ddfc05b94cfeeb7bcd679fec000f57e2965f4f3bb3d6874d73fbc69553ecc4fd5f212b16bb10e02755218680e7ecb1f44e4bd21","ssdeep":"768:Gp23IYRLDJX9FpnlROhbiOrRgk5gnE3TyHm:GC7JJj1bQiRk5d","tlshash":"7fc2f11283508520f07d4abf296a6ad060487964093ab42b6cfd7c523fbc4ef4eec3e5","first_seen":"2026-06-08T21:53:39.607482Z","last_seen":"2026-07-08T11:59:44.509972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/lancelot-slot.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.166Z","timestamp":1783511964166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/lancelot-slot.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/lancelot-slot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj9ohrdhn8q\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otJv9y7t2FBShhwm40JETD8t1baZDH3ireA9mIV4gCFy4XM%2BsS3omCfRltPBjw0042fkTsOdKjj91G9z%2BT3zj3fQfoz15CrRi3X%2BkSSNmxy20HBh5pG1xH6KJFIR%2BPCAdK6mqg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec300a3f569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30122,"size_decoded":31142,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e917d83972e72cd87a99e985d2b014fa","sha1":"f58fb1452304e4e7907019683e60b22bf07a4906","sha256":"b1c8f1be67597f8027adc8a772b9a9fcdee266460e565e1d200b4ac7c682e5e6","sha512":"756ce802900b9f6caf1008beef39616e59b89626405e00b0ec7e1b4ea2ab95eb156efd8b58862230ccac82dc2c92730a189681719947bb9b81fde5d0f1dadcdf","ssdeep":"768:FyisseyffuDA4/2sAMWFink//nxCGqLfoI/9GrWG2a2/9wBK30l:FiseyV4/2zMxk/vxCG6oIVGv2O1","tlshash":"add2f267bf7058a6c78eb333b7f8a7684906c81e0a72f252d7f526d51b13ad1bc85024","first_seen":"2026-07-08T11:59:44.51147Z","last_seen":"2026-07-08T11:59:44.51147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/wasabi-san.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.267Z","timestamp":1783511949267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/wasabi-san.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/wasabi-san.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kjeu8zcuoeg\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0s%2Ftm5bgK37PJeU0Y0gDPElt7g%2Bgm2TehCWq5cz7ZVii7myrnp9tD4gONqZurjZL%2FGZMfBjAiXdLCMLDsnjXcQn5QZvBnuRWGyv%2BQaFvFNz1auspKwda3kqTyR75Ak6%2B%2BnDaqg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eebd2ed5d569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31624,"size_decoded":32645,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bfb7e3e7f995f7fbe8784b28a4badc54","sha1":"ce6c88bd09804ff4f4940463da2f0d3d97680bbd","sha256":"24e4dab190975ee9b6589ba4307308c7f464ed2f76bc2104227e0f01bf9e7f7a","sha512":"7391e4863341e693918e9db99088af9b4d30fa51c0d0e83ee1f68eb05a036d641ae49c2c995b5080c3e041f25a51457b6efcfca3fd7f11dc15d78cc5522996da","ssdeep":"768:Iba4YPXHmOlqzKWd2xEIZtk4PI/AdyKe0JTV:IbHYPXHmISd2dkLIHJTV","tlshash":"2ae2f112e4a8dc3df90a78bca5e8b415de13bea1a5d2414f6dc2017c0e6672d2b05fce","first_seen":"2025-12-04T21:09:10.773011Z","last_seen":"2026-07-12T15:18:43.840434Z","times_seen":4,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/svg/games/table-icon-2.svg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:09.309Z","timestamp":1783511949309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:59:09 GMT\r\netag: \"dh52kkzxh37h164-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YKg4mRr%2B9hfVjVku%2FzrdryG%2FDZa%2BjuCkoe4964YwRhI2jrn7NmLs3i9UhWhlNgEL36mb6SwgmSfY%2BVPRdJ%2B8wSJyNjB2a82H%2BsYRSNQzrcdg4etz%2FlAOgY7a%2F9HHsFBpD5bJA%3D%3D\"}]}\r\ncf-ray: a17eebd33d7c569f-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1816,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-12T15:18:43.805885Z","times_seen":55,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/highway-kings-pro.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:17.264Z","timestamp":1783511957264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/highway-kings-pro.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/highway-kings-pro.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:17 GMT\r\netag: \"dh52kj8r5hmumox\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtuHUx3EMJ3PRxm2%2BQrXb4w9ec5JgDmzQPVgHwIhyk0MfnRb9DKrznlLNJC5XvmyuhrH%2BMZ3SwZcafT%2Bx8zzXE10rJjrMI7EMJPifYrqta40H5RLrW%2B2N8W3BtUdq1Q%2FBV6p%2FQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec04eff0569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29409,"size_decoded":30437,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"055b950c7c6741e1a44dc68d735e5f60","sha1":"ac8aa685178a72b2e63ff44981537aa00af01980","sha256":"bd6b5adaf88395505830ff64ba42263329feda1f9ecaca1c74ea68be6e7ef804","sha512":"b8d2998c8b81996c1521d1eb6836ed5720fd1af432fb3901d663072c50fa301cf7d622101017692cc3053fbabea2a3dd10748d6c9db30bf9cf5dcd2ce6748396","ssdeep":"768:jRWoJepXF9YZWNYbgv5CQ/QBuGze3kSLclptTPv7ape9:r8nCsNYJQ/f4BSglbv7ac9","tlshash":"dfd2e1d469506426cc42bc2e4eb1792cffb69c8665710f591c833e608bea4f56a2a4f2","first_seen":"2026-07-08T11:59:44.515042Z","last_seen":"2026-07-08T11:59:44.515042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.eu.com/uploads/media/games/esmeralda.jpg","fqdn":"rainbet-fi.eu.com","domain":"rainbet-fi.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.213.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.eu.com/","date":"2026-07-08T11:59:24.146Z","timestamp":1783511964146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.eu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 16:30:27 GMT","end":"Mon, 05 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"6D:27:D5:F4:9A:E0:C4:FA:3E:B6:84:C2:BF:B3:78:1D:36:4D:3A:1D","sha256":"29:15:66:9D:A7:06:14:3F:20:87:35:6E:EF:E3:E6:4C:91:73:D9:24:D6:2B:31:F5:13:A7:90:11:C9:F4:AB:E8"}}},"request":{"raw":"GET /uploads/media/games/esmeralda.jpg HTTP/1.1\r\nHost: rainbet-fi.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-fi.eu.com-/uploads/media/games/esmeralda.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:59:24 GMT\r\netag: \"dh52kj75zvskl0y\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sCOV4PVnPXSKKwqGbb0wsd6bvwwdxZtSJ9N5QhkEwey%2Fd7dRJ4N0NyQUgglX1gqabG%2FAtwPyrC2iur0HJxgpElLZsEpAYBEsPA2gAZVH3s8LTyQ7z46p49Y8%2FGm5lsw1UbvdQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17eec2ffa34569f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27250,"size_decoded":28264,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9ed83d9527420af39225901d0311cdac","sha1":"c0dbad460e77b835d5ac5e06f7a35073dc34d598","sha256":"e43b64e7161a2a671d0a48ecfac4857cf8c8a626665c5ad7cb4391e8499f6a11","sha512":"ce35f1c6ce96f23f783f308eec4b7fc6d3160e1d49bb316e667924c794901205a9a0f68347458621ccd8a2927409ff4f629ce8274acf9d967cde5a4737b03262","ssdeep":"768:McgUmS8+m5ZivTJa3RfkHBbjRXh3zbYMIje:bgUmf2Ja3OHBZR3z7Iy","tlshash":"34c2f1576773b4789ded878471ac71aa32e0280063ef3c51ab3211a2475b60f9f492f9","first_seen":"2026-06-14T01:02:41.590882Z","last_seen":"2026-07-08T11:59:44.516509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-fi.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}