{"report_id":"801a7665-c80f-42fe-82fd-cb26e3884f21","version":0,"status":"done","tags":[],"date":"2026-09-17T03:17:17Z","url":{"schema":"http","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"104.21.93.35","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"title":"Rainbet Casino France | Revendiquez votre bonus de bienvenue : Cash + Tours gratuits maintenant","dom":{"size":33534,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1390)","md5":"f13584eff48eaf1fa85baa3ca55e09f2","sha1":"3d41c02368d4c6c24f07d109ecf32ecbb59a2b43","sha256":"8617ac73df330fd5a6922a3d2fb6bc35cd5fbcd7a7523896cfb2888e3bc3c485","sha512":"51663d4b229bcff0d806506562bb30548c26359d1f8b67d249f00510b88a7e436f1235b29b7109f55fb45b32b790d7136b0278e2c2cb265802eb1a7d7cb6c92a","ssdeep":"768:h6W0fgTkG6k701t25UVlmykSk/FI+mUD3SHSM8QXLe+DIdklw:MMT6kAz2572SM89+D6klw","tlshash":"c0e2082fd5c4126305d392c1bfa13f2bd46c4994e01aa264c9fb9bc602d4df4d2ba2ed","dom_hash":"domhashf463c9d51775c16cf96749b207a0cfba","first_seen":"2026-09-17T03:15:02.180137Z","last_seen":"2026-09-17T03:17:18.74814Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"104.21.93.35","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:17:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-fr.casino","ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-17T03:14:57.767102Z","last_seen":"2026-09-17T03:14:57.767102Z","alert_count":40,"request_count":20,"received_data":357251,"sent_data":11178,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/plugins/slot_pop-up-acf/script.js","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50ab77ea19a73dfe16bd2d7b27cfe552","sha1":"f656f74aea32f188a0dd0d79dde891f036fe4b1d","sha256":"e2d07cf6eb851101b44794659a15a0c071893a68cfcb24282efc372e8d9d0ea0","sha512":"9bb6a7e10a61a8ae43452dfebc7b59bc113e64309991d06414ef01b100b9f8577bf1a5c1a006c4804d3a33e659573d14eb33c790af7fe96703e372fc57e73852","ssdeep":"","tlshash":"f4e0ab2442f048ba007ac4b621e89bed2c7c144615898aad009c7d081ecc6e573f00ce","size":385,"data":"","first_seen":"2026-09-17T03:15:02.203581Z","last_seen":"2026-09-17T03:17:18.752595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/assets/js/main.js","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eee96b15a59c9c2b00ec1e2824ac98bb","sha1":"6f39d25ca4959e5a5d9a60f171c0cf7889b014df","sha256":"7eb978e2c06553ba420de544d6cc00593fcb615514894a512a8fe59421aa75f0","sha512":"c4a5a2ebb411b92f740e5737d8402d1c37a336b63d5d48820aa4691907ccc2dabcd8e1c218b3c98a5f719f4510d1115545ab6521111556e32662104c4bcde7eb","ssdeep":"","tlshash":"7b11dc793435083000bab1b1a69fa7c87d3c20daf0473947384ccddc98c5db515b14a6","size":884,"data":"","first_seen":"2026-09-17T03:15:02.215682Z","last_seen":"2026-09-17T03:17:18.7497Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccd1db418b1dad64c84e4b28c3a66deb","sha1":"e26c8a3d837ec0ab6aae627ecfb4a8162ae508ff","sha256":"b1a7b78fae60dfd30ab0551c127585d154020c8efc0f47dcddf6833b7cd60ba9","sha512":"665e8640a8d81abc529b3698534b3636776d8ccddf5c200e21682c1010faf7de535e0662b524e9c63b64b604fd9f4514651d5cb3f53710cd90c8869755faa583","ssdeep":"","tlshash":"7de0c23b3ba91c7781bb989b51c456b83f2990c6b643806529accd0907d0ed458faae7","size":305,"data":"","first_seen":"2026-09-17T03:15:02.224291Z","last_seen":"2026-09-17T03:17:18.762143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce419a5014bac9c4846c446a3b761dcd","sha1":"acc52cd7c817c92721189f4e23bd5b61b1abe473","sha256":"394013e1f53cbf7f8b99493716665078e840a150a3c3865e2f74340d4f78b23a","sha512":"6b3924cce6b4182294abfa7603f29f2f7b3f59a85c9834a22ca44639c4562d9cd807057e8516d0045c8e1168777ee209301d6cd18b8357eaf5c36499b08257e5","ssdeep":"","tlshash":"9ff0c00d188a0d7d41366278bc39cd1cb1eb1c14d071c0409ec5d8746bb5fc6455034c","size":519,"data":"","first_seen":"2026-09-17T03:15:02.225962Z","last_seen":"2026-09-17T03:17:18.762711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/matomo.php","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-09-21T01:18:20.143852Z","times_seen":18709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-fr.casino/","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:16:38.025Z","timestamp":1789614998025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: rtc=no; expires=Thu, 17 Sep 2026 04:16:38 GMT; Max-Age=3600; path=/\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCJs%2B4gesKdR6FEOZrnEcjOds9gnfA75B8yNu5HHHPFmetdkp6fqw0PJppIU0GcxqwyDb5ithHqvs0RJHoDNSXN5pB8RQLAsAs%2FLlapm%2FMn5suSe%2BoG8Sp1qr6St6saCPwvAqw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3c4f409d87ab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"rtc","value":"no","quoted":false,"path":"/","expires":"2026-09-17T04:16:38Z","raw_expires":"Thu, 17 Sep 2026 04:16:38 GMT","max_age":3600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"rtc=no; expires=Thu, 17 Sep 2026 04:16:38 GMT; Max-Age=3600; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33490,"size_decoded":10859,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1390)","md5":"68eea5cdf03d5e5cdafdf31ef8befdb8","sha1":"1410d3d77b28baa97b020491b982b8f0e184f214","sha256":"daf6f91f565a19d3194d90d0a865a3f73e76893c630382152090726c28285b85","sha512":"ef89d42a087c629a249bb104d79ebb5bdcac65c0f16035471da2cdae763e1a0255fb3aa48c66780b0d828601654cdaee0eaae861de3ffbcea69263522b9da79a","ssdeep":"768:zEK0NgTkG6k701t25UVlmykSk/FI+mUDYSHSM8QXLexDIdkl7:I6T6kAz257DSM89xD6kl7","tlshash":"7ee2082fe5c4126305d392c1bfa13f2bd46c4995e01aa264c9fb9bc502d4df4d2ba2ed","first_seen":"2026-09-17T03:15:02.192345Z","last_seen":"2026-09-17T03:17:18.749114Z","times_seen":2,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/assets/js/main.js","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.663Z","timestamp":1789614998663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 09 Sep 2026 21:51:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPUGbgbNBJSGMdmdFjCvjD45ciSCrXrsQsnTztX6Ph%2B3fh2WOq4e%2BVt85egVWwQX0jukEHy5r9LHwphJinbfygEW8PIFUcacIHQ41Wp8FfA%2F1MIQZKJKUzQv5054xWKBiFYiZQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aa1d4fa-374\"\r\ncf-ray: a3c4f40da897b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884,"size_decoded":1155,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"eee96b15a59c9c2b00ec1e2824ac98bb","sha1":"6f39d25ca4959e5a5d9a60f171c0cf7889b014df","sha256":"7eb978e2c06553ba420de544d6cc00593fcb615514894a512a8fe59421aa75f0","sha512":"c4a5a2ebb411b92f740e5737d8402d1c37a336b63d5d48820aa4691907ccc2dabcd8e1c218b3c98a5f719f4510d1115545ab6521111556e32662104c4bcde7eb","ssdeep":"","tlshash":"7b11dc793435083000bab1b1a69fa7c87d3c20daf0473947384ccddc98c5db515b14a6","first_seen":"2026-09-17T03:15:02.215682Z","last_seen":"2026-09-17T03:17:18.7497Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/e4a82-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.672Z","timestamp":1789614998672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/e4a82-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:53:05 GMT\r\netag: \"6aa1d541-1f80\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUnDtOAooGoIgr9AG8G577JWlZDEBfrHsJGlt3Q9Sevfqkh%2FV3JufSWWGpfLA5y%2Bo0L0xNgklm%2FDryt%2FcOJ4XD6YNLHUCflsw%2BjVTmcCKP96xpKUcWMMn8Kc5eAWEw4tq2GPyA%3D%3D\"}]}\r\ncf-ray: a3c4f40db89bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8064,"size_decoded":8772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6438435e7fc2e284f9cfe35a4797b6e","sha1":"6dd72d311700e862aafa70a5563195d84308b694","sha256":"d0496ea9ddc8aa8d3ea3c09ddb042b69a4ed644b784ed41f306adfc44ba5766e","sha512":"0c521a9de9fa31f92107eba613f844e16d427c2a55046843632f3d937ce2d12e9373939ba238170c700c503a3e7750c89c7877936fcead00271c39720a7d00c1","ssdeep":"192:uK8UblfPkRP5jKIWyc0yY5SUb9rCw6lE51:fZfPkRRjFVcu5SU5slE51","tlshash":"24f1b0ce809d6581d1d69948191cef0510f46fdcee0a769cb0bf0cea51ba1dc90bba64","first_seen":"2026-09-17T03:15:02.217041Z","last_seen":"2026-09-17T03:17:18.750354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/3b63b-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.684Z","timestamp":1789614998684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/3b63b-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:33 GMT\r\netag: \"6aa1d521-2868\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11UPHC%2BuiAedNAj6KlFV1Qi5tme7aElkhnBbkHTCOfqdwjzndckc3BUz23TWe04eIYcl9pA2re0SUWwsJX01r7wDbRiG0ZgHJkufjhvJY3IPzl3Kdzf3iFAGFRsOKMnKGmQ3ew%3D%3D\"}]}\r\ncf-ray: a3c4f40dc8a4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10344,"size_decoded":11045,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"877fc2a4ff331c6f11704f0569a4777d","sha1":"46023d4895776ea955e6d3898a06c3acbb336bb2","sha256":"c7f5d9e6afbb7d14bdf7262a1658322e5647c5124ac2d8a2fdc9764fae5576f9","sha512":"9e9c08089af4a0ef6609c5478d6fe457faaa769ab4b5e560f65bd94ae406c21db747dd82560ddf3d2514b58ac14dfde165c10bc32ecf315577dacd97469efc0b","ssdeep":"192:CYkJXgFsh7fuFO53YZwuD6iQmYBVQO4X/VH+afmL4tS1gsApkjTfsyy0:CYvsRfu053SwePe5MxOL4hVKft/","tlshash":"f622c0d5b7ae8cb1dc14694d4b728fa54084e0d1bb187a7a2f4b50d224f0ab21399a7f","first_seen":"2026-09-17T03:15:02.184473Z","last_seen":"2026-09-17T03:17:18.750983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/assets/css/style.css","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.658Z","timestamp":1789614998658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Sep 2026 21:51:53 GMT\r\netag: \"6aa1d4f9-510c\"\r\ncontent-encoding: gzip\r\nage: 131\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lugnZ89PAdwT7XV95tUbywrSQuJ6VpgSaM5AE1%2FWUkpzDBANAiGaUwiVeqKvk69vpwVWQnj%2B9SvUhWyyCPmGYAszweTRL2jxKjXgbNMXq7fvI7LvrnQzcCUL8Qcxjz%2B%2BPh3V2w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3c4f40da895b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20748,"size_decoded":6982,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a37934c75a0ac1a77348ee7c8b7e521c","sha1":"bf6b47d5a673365dc870deaee959a0e8184896a2","sha256":"80c4cd271ce2dc95ab71d3d9e4e29e9969f18da7b1f900e5e522da43821b28dd","sha512":"1c99329b5df846374f1cd04d95a707fa459ab6f41141874005178b208ca0ec17f4723317c6d11686e82251a6bbc8e6f7eb0ff0ecbf23a16e4c3b0201e916b77c","ssdeep":"384:a2xJdtH69Wvhyd68eER1h5mfWsnBRa4ya+gkZW6k8jkn463w:bxJDH69Wvhyd68eEifnBk4x+6B8jk46A","tlshash":"889262275a112554b53fb0a43ee4d74a222ee583e51716b936de100cc3ce2be5173bde","first_seen":"2026-09-17T03:15:02.214061Z","last_seen":"2026-09-17T03:17:18.751883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/plugins/slot_pop-up-acf/script.js","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.662Z","timestamp":1789614998662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/plugins/slot_pop-up-acf/script.js HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 09 Sep 2026 21:52:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnKA1YHEFMHE60tIUOeYRh9Oz4B4L6jDdIXIjaszDvnmW5%2F3LKsfzcHk4VIHwdReY4fYokRY7%2Fq6eQinnSNiFJnso0QwBusPHqv0DSq1QBrk6qolAVRmMefN%2Fwvk2MrrMTvg7Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aa1d509-181\"\r\ncf-ray: a3c4f40da896b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":942,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"50ab77ea19a73dfe16bd2d7b27cfe552","sha1":"f656f74aea32f188a0dd0d79dde891f036fe4b1d","sha256":"e2d07cf6eb851101b44794659a15a0c071893a68cfcb24282efc372e8d9d0ea0","sha512":"9bb6a7e10a61a8ae43452dfebc7b59bc113e64309991d06414ef01b100b9f8577bf1a5c1a006c4804d3a33e659573d14eb33c790af7fe96703e372fc57e73852","ssdeep":"","tlshash":"f4e0ab2442f048ba007ac4b621e89bed2c7c144615898aad009c7d081ecc6e573f00ce","first_seen":"2026-09-17T03:15:02.203581Z","last_seen":"2026-09-17T03:17:18.752595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/e06fc-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.675Z","timestamp":1789614998675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/e06fc-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:53:02 GMT\r\netag: \"6aa1d53e-1d68\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Shvk626DnLsJwXcMhi1WP2e1YCbYX3k3Hrq2fyFY8zjkMi2uD92K%2FeqojpTzGhsIIyEKi0gnO67YcnpUdR2rV9zlWp0twrM7E6QMu7PSNEGc4vsZoN4l4UkJI6QtP4DvaQWcVg%3D%3D\"}]}\r\ncf-ray: a3c4f40db89db509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7528,"size_decoded":8228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bcbd62a96082321dd534d720dfb42d8f","sha1":"6f57228d5728ea967a3ffeb96d51d74bded92823","sha256":"a6fb15357e047d96072b60b8ccbe258fd53eb9db254164f3694e7971e7afdaa2","sha512":"e9329830fdec2d762c2a395d73e5687154ad7106e410faa7b39720c0fc5da4aa48d9702d01f4f30d079fb03fb637ac25dd24ec688ee0e5f6f61688961f560fb8","ssdeep":"192:kxUiyIctp7Yv6jx/1kyJqlRpOKaGh/X76pJscxKK7J:2ctp7Yv61Cy2i2+MAHJ","tlshash":"a3f1af85042a91b83a842437fabbfdfb1271c8dd89c4c5e29f47e62038d9605c42c1f0","first_seen":"2026-09-17T03:15:02.218278Z","last_seen":"2026-09-17T03:17:18.753325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/a293e-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.676Z","timestamp":1789614998676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/a293e-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:55 GMT\r\netag: \"6aa1d537-23e4\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVogzww9WOq18oLUDpCr0%2BbmtE4cffF%2FVDLQMgAyJVUf%2Fz7iihIkNCqiR4WImPQ%2F5x1kfq6Bg38qQ2S%2Be7ryMo3Kexn8Nx7mkOd4ONXhMtkTfriHHnfDOb%2B6X9kCaj%2B9Ql%2FlBw%3D%3D\"}]}\r\ncf-ray: a3c4f40db89eb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9188,"size_decoded":9902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0619338fc12b5729b0bc43cc1655d223","sha1":"9c161b6d135d41eaba815b3edf7700f4aba1b125","sha256":"426faeae32bbef7b07d93a2de6692c6565f79182ab3cfc3887b4e2e2755dded0","sha512":"45dae2a7917e68bc62aef8422b7c4b03437ccee969755d13ee1cee89329a83c0555d443bb9f390957f20db98f3c3a6d3cc703b1099f8ede7daeea847e2ca9dde","ssdeep":"192:sglAi3l4LeSAk+oRYlhpWifNdvOSsFynegb4eCX5XwjoEt0Kyc8TVLt7Ai6OY:NAyl45Akt4NPnegqXioI0xt736t","tlshash":"ea129f8c6345d77edc18653ad49ca854e50ea3da39ca6bc684792bda7014bfc6230839","first_seen":"2026-09-17T03:15:02.208233Z","last_seen":"2026-09-17T03:17:18.753918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/63a4a-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.677Z","timestamp":1789614998677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/63a4a-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:42 GMT\r\netag: \"6aa1d52a-1e4c\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPpwUh0dOmQX01dTUerSXNi5usPYN7igJus78AJ%2Bijm5gTHZoCc4pfrn6LTbD4O0gTDnObv6m7T28gDy2EQFGpc8iAPgbd0QEyT%2FBu3nFtiCXGn7v21zVAjJo7H9SiGXEQ48kw%3D%3D\"}]}\r\ncf-ray: a3c4f40dc89fb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7756\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7756,"size_decoded":8458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a1dedef1eae18a43a5f8c77adb88542","sha1":"69a645da0428c6de6409562a1394188877174b2e","sha256":"0486b74c379193ffc4cb20a6fe154d939b2791e97d9495fac106dd66cebe6ddc","sha512":"aceb30fb33f3c1cc71dedcbece33f379f73fb75608a1725e8e12582e200144df2f09339b511a2c4b9683a9a92fe7fa08b98e21f14087077138171c3dae19ae6e","ssdeep":"192:giJCV+fnaegPAEgCB1Ni4rOiuJao1KWE8Nc0gIQUY:gis+fzgP4Cgy2cGq","tlshash":"6ef1bf522fa3f3da36f001bae041ed7660c3f111e7f5b022b03b99b9875230d642089e","first_seen":"2026-09-17T03:15:02.198737Z","last_seen":"2026-09-17T03:17:18.75512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/31b71-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.682Z","timestamp":1789614998682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/31b71-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:31 GMT\r\netag: \"6aa1d51f-22ec\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeORy1Zm%2BEWZacOGyVCvhN69Ta2K3isSypjOoUJP%2FFLOty1hAWtmw0N243I39mzbKoamwMCB%2FnPgldEEo8pI6nIYXTdXv%2B5Dm%2FeejopusqYpvdyFewerKDStlVTzW9ipZHze2Q%3D%3D\"}]}\r\ncf-ray: a3c4f40dc8a2b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8940,"size_decoded":9648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62e81ecf3256837a30501f9f01fc8af4","sha1":"0f21b083e1352a3b67581bdbac68ddd4de007965","sha256":"cba2d9116c7d10acbb02133f02a03e17f9edc147263822607d1b288c10f60e1f","sha512":"3df176cabbb7c6770e814cbb9b001d427de62649b52d88a4402e6919b96d1dfcf8bb83558a2034a907e30eadbc832d31503f9e4f0c6d7ca4285d36683806f5e4","ssdeep":"192:V0lyDlDZUi3KPQCiUl9i4c3jR+i6dUo8l8i5v0gL:VT3Ui3csUq/3jgjdE3L","tlshash":"8b02ae94c89a5e4257642e9cbc06f8bedb753bc20470e09506c382c213e7ca6a76d9b8","first_seen":"2026-09-17T03:15:02.210315Z","last_seen":"2026-09-17T03:17:18.755813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/139e6-192.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.940Z","timestamp":1789614998940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/139e6-192.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:14 GMT\r\netag: \"6aa1d50e-1356\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BX04zNpkRKcmZ9nCoEy1mRKfXe8NKAPuCx3AkYiI5jJr4zVk%2FSOGQRB6448CutY%2B2XYkFx%2FSxnjsUHE4OLe5rsHcmYcgpTMzIHCJLNbrxTAl%2FjtYuiR6MPjvDun5hYDP3KqiCw%3D%3D\"}]}\r\ncf-ray: a3c4f40f68acb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4950,"size_decoded":5661,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b5780cc10f057fbea4736608cffce46","sha1":"418790c99718c660856a116185f32a126d55c734","sha256":"bfcb0c677d9a61a1cdd94a1ac72d650203628f6f3d6f7c37ec19bf93d44cf2b0","sha512":"d4b856253606c227ea2b51054a6858de8d6920e910f5995c65a2ed19ebd1fa74428f9c11bfcc273ce36ad693e99cc51306606816edbff356f98eb5d13ea32a1f","ssdeep":"96:N029NYPGEOTU9ZM1j8sh2miKLVtIggQJJ2lVFIUZ3fmamw:N02vY+5d14shHOQJJ2lVFII3fmzw","tlshash":"fca19f2f9d94d8a2db4f665c34b567d4052f22356d55f71b6bd3a470c1dfcc8440a18c","first_seen":"2026-09-17T03:15:02.212478Z","last_seen":"2026-09-17T03:17:18.756692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/matomo.php?action_name=Rainbet%20Casino%20France%20%7C%20Revendiquez%20votre%20bonus%20de%20bienvenue%20%3A%20Cash%20%2B%20Tours%20gratuits%20maintenant\u0026idsite=23324\u0026rec=1\u0026r=500575\u0026h=3\u0026m=16\u0026s=39\u0026url=https%3A%2F%2Frainbet-fr.casino%2F\u0026_id=623736a43a54f544\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=dYt0Yc\u0026pf_net=39\u0026pf_srv=332\u0026pf_tfr=0\u0026pf_dm1=167\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:39.292Z","timestamp":1789614999292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"POST /matomo.php?action_name=Rainbet%20Casino%20France%20%7C%20Revendiquez%20votre%20bonus%20de%20bienvenue%20%3A%20Cash%20%2B%20Tours%20gratuits%20maintenant\u0026idsite=23324\u0026rec=1\u0026r=500575\u0026h=3\u0026m=16\u0026s=39\u0026url=https%3A%2F%2Frainbet-fr.casino%2F\u0026_id=623736a43a54f544\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=dYt0Yc\u0026pf_net=39\u0026pf_srv=332\u0026pf_tfr=0\u0026pf_dm1=167\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://rainbet-fr.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no; _pk_id.23324.db22=623736a43a54f544.1789614999.; _pk_ses.23324.db22=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:39 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2reo3lDT9mwTd21lIRUmYG6vpoVPisdJu7n8v%2FB699KelwTjQIPiQHv6B4chvmDT8lKqEVnmwDE0jFx5wshvR5pegdnVbyLF1IahGwLsdSYgOrVNybZ%2BUk3SKrQbSxobiTbNtQ%3D%3D\"}]}\r\ncf-ray: a3c4f41198c5b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":530,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T05:48:31.029198Z","times_seen":18578776,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/21e50-1170.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.669Z","timestamp":1789614998669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/21e50-1170.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:25 GMT\r\netag: \"6aa1d519-1d3b4\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74iw2VkrohkobtZC7YM12UYUROhAkVhIPbN1BsPzFc2qKrG0OEM2z0l%2FsHdm5PV24lEPzqWEi9032bYJOx8Z%2F13XKIUl6SZRd93ApnR1BXM%2FiqTmpgu2sJiQ%2F6yZTVqON6jigg%3D%3D\"}]}\r\ncf-ray: a3c4f40db89ab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 119732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119732,"size_decoded":120441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x780, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99076d40153c6d20368f520e802d24e2","sha1":"d39eb8f35016b476b24fc4b4760642935df19210","sha256":"1743af72109f9e5986e7044bd9e6407553162487b0b206851ecb8af654baacb5","sha512":"2bee771a40de76bdf93b1b4d62c6ce754beec9fca6ea67fb99f94ea8abcb8e293b20ea434d5db135d575bb7d9f054e12b0dde6f63499c273dee20fd378206f1c","ssdeep":"3072:eOiiO8OmJa3u2mgpk1UT8Yn3yqwLJR0PKwmIChKud7w:epjTmCud6eUT3ZkJR0PFmBvhw","tlshash":"27c302d7f006c32d474e660cba24d8e66ea1cf199d8b737b396f0b9514ad4c1e23a970","first_seen":"2026-09-17T03:15:02.206165Z","last_seen":"2026-09-17T03:17:18.758032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/1e2f4-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.680Z","timestamp":1789614998680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/1e2f4-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:18 GMT\r\netag: \"6aa1d512-2598\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RriKWOJI0MiKGhBN%2BTeMNWSstbDT2a4n4YWZstRcEwwg8xsBcJb57yxcTWGbd3YGX3nYfxpAlKFW%2BN8tCqO0UkmfPCnAgcskJ%2BgpB6Ks21gjo1XPvLeWykZMdjLl8F3h0wDfHQ%3D%3D\"}]}\r\ncf-ray: a3c4f40dc8a0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9624,"size_decoded":10328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ce1dc3d471ed8fb4f0ceb5e638488a9","sha1":"73c34dc1d957c2e3e1513360ea1e311935d09638","sha256":"40f9e06a04bfa8a02151a2b3104bdacc5ee1036abaed489b747206f4df4fd0db","sha512":"b238afeb88900e6b17111f0c4be736b06946ae0236869490f6a63af6d00a69857e5122725218dda5c2f3a5e90dda48b68daf157e8e124e376fae21442da08f07","ssdeep":"192:whrkectcMyXmQ63fsj7Mc2OzQ1gBvCHh9PbPoD9yakrtJ:aoJdUMsXr2T6EhFFJr","tlshash":"4e12bfd0da6701408dbbaac2117e4fbd3c4c28b9f516bff6d49e10ce0474e222a9a764","first_seen":"2026-09-17T03:15:02.219625Z","last_seen":"2026-09-17T03:17:18.758566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/20a7e-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.683Z","timestamp":1789614998683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/20a7e-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:23 GMT\r\netag: \"6aa1d517-2bdc\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMg8jlEQC%2FP8Y0kbHvQ63ZpvnhoW%2BqzyvziWS94%2FyOohx3O3dS7%2BNpaRZzSGgGOx%2F2fIs1ZlLlgUhbA%2FO6ljPvtO4NKptBrZ6egiT3pmqS%2BVU6wkhbRNE33k5fzlPS46B74phg%3D%3D\"}]}\r\ncf-ray: a3c4f40dc8a3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11228,"size_decoded":11941,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89a6c1b70c9710448318716ccbbe3ce4","sha1":"016c503f840867c2c75f95f4a99eac517cc42b58","sha256":"4fe67296bbb268cdc63ba28039bd6112cf4dd8071328b3964fe9fd62486bf610","sha512":"b1cff57a559aac193daeeb15da0fb9041d1c596ffa02d0edae05e3ced56d6200a1754a7127eed66caa3f1a0684a98066c8771c6fbd9e2242c53a0dc0e9db87c3","ssdeep":"192:xPkxC12kUDnA+BG70Oufgaui6DdF/UjcZSI2P6EdHH8a/4wsBL98R0N4Qy:uk1uG70bIfr/UQe8TBp8ag","tlshash":"6b32cf5d22261ea74d83311a2f57a86fe47ce5b3ca00fa872ff788f13468cd19046da1","first_seen":"2026-09-17T03:15:02.222588Z","last_seen":"2026-09-17T03:17:18.759057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/139e6-32.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.943Z","timestamp":1789614998943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/139e6-32.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:17 GMT\r\netag: \"6aa1d511-1a4\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LC%2BcyUasActLR7vErR6agWBhmG6p4jtIcccupLJR7pYZCMSylxwCaZft0vKlk0%2Bz3annzfKjYmXT85dpNZSyqpH7nbDLfvxINss7GvAd1DiZB7rAycZuf9KMAu8a%2F9kmgcmmmA%3D%3D\"}]}\r\ncf-ray: a3c4f40f68adb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":1125,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ef2d8877389a485f44a08f8fd03f42ae","sha1":"f5d9aaa307ad9d55ca369df307863ef61416171b","sha256":"d3737f71448775f61cc8528c1f99b9f3e1b2443fb4c7e6b0969f19d62b7914ce","sha512":"0c3191ecf7f59de166b4d5da240cfd5c9ca683b38aab22e966ffebd67734a51697ec698795a0bce1b148f931e130e913a4b05994b1a80f814c1b4feaa11ac2fd","ssdeep":"","tlshash":"dfe0abecc2f6fba0e066a2f0564bc2b430203e5c4876e6e12410985ab824e163b69f58","first_seen":"2026-09-17T03:15:02.188429Z","last_seen":"2026-09-17T03:17:18.759623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/139e6-192.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.668Z","timestamp":1789614998668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/139e6-192.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:14 GMT\r\netag: \"6aa1d50e-1356\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcju4TScKUhOkkOSYVfqLqJz96HNdAlV%2FAwiraupfeU%2BbE2%2BWba%2F%2BnA4YXhK0jItHprfMfioGnDyuWNVGkVEm6f29UynJCVYgXj8z21Of%2FkDYtiM9KuwvOxs3mdPvJrW6z%2FMug%3D%3D\"}]}\r\ncf-ray: a3c4f40da898b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4950,"size_decoded":5662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b5780cc10f057fbea4736608cffce46","sha1":"418790c99718c660856a116185f32a126d55c734","sha256":"bfcb0c677d9a61a1cdd94a1ac72d650203628f6f3d6f7c37ec19bf93d44cf2b0","sha512":"d4b856253606c227ea2b51054a6858de8d6920e910f5995c65a2ed19ebd1fa74428f9c11bfcc273ce36ad693e99cc51306606816edbff356f98eb5d13ea32a1f","ssdeep":"96:N029NYPGEOTU9ZM1j8sh2miKLVtIggQJJ2lVFIUZ3fmamw:N02vY+5d14shHOQJJ2lVFII3fmzw","tlshash":"fca19f2f9d94d8a2db4f665c34b567d4052f22356d55f71b6bd3a470c1dfcc8440a18c","first_seen":"2026-09-17T03:15:02.212478Z","last_seen":"2026-09-17T03:17:18.756692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/4f9d3-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.674Z","timestamp":1789614998674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/4f9d3-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:37 GMT\r\netag: \"6aa1d525-2990\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=675k63G2y0r2uM3nn0x5Vfr3xV3MJsme1T9ml2XtK21xvPjFErl7ZPpHSZi5yEt3JP1WSXKDNP357kdMKITRHYFFT%2FFng1GdENzwovfMbB3xgLoeLw%2Fwv1z%2BqXbtCSR79Zh1cg%3D%3D\"}]}\r\ncf-ray: a3c4f40db89cb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10640,"size_decoded":11345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f8567ad00ee9e7e8dba19ab7b72d428","sha1":"f27eaa18a01028a84c11c4b79757f85410bde629","sha256":"5bda16b396475b5a80bfccac219a140017b9d7f3460e02ba0cd10118dc3b689b","sha512":"da7d4235e47173642b9cf9f7c072645be318630cc07c7048c575213bfbee3fd4ed7a77c7baa7f1f9ea8bdfe533b44cf6d950524ecde2c1bb6ed9798f6b1583be","ssdeep":"192:hBFzDBL3JbrbiOPAO9NEJ1oOZa068EsD3AnCdflJn9bZ8x80CAHkn8C5hrjJoFy:hB3jJTiOoO9NEH4pnSAnCdtJn8xRCPh5","tlshash":"d622bf7ae2b5907fb1ea32711044019b3489c05e2dc79aae82a97990ec76e564486f0b","first_seen":"2026-09-17T03:15:02.195333Z","last_seen":"2026-09-17T03:17:18.760484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/wp-content/uploads/2026/09/3053b-220.webp","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.681Z","timestamp":1789614998681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/3053b-220.webp HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 09 Sep 2026 21:52:27 GMT\r\netag: \"6aa1d51b-192c\"\r\naccept-ranges: bytes\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPWVcCbKa9LsaooX%2FqRoowVDNhSbusA70xX8D22KqJdQ5zM1183K5pLU0kIJYONJBCcUo%2B19HRY%2BzzT1JXEToOw2YAGHEaZewA%2FJGCxnuofE6wSiOuBIRHsfXuAH9bggO35PIg%3D%3D\"}]}\r\ncf-ray: a3c4f40dc8a1b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6444,"size_decoded":7150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2ecce9df99f09a777e1ded7ed1c8f92","sha1":"59510b346d6016f48ab0845093fba8407e706ae6","sha256":"7d4b83649de922c80544e685dbd294c6a1ad8d4dc7b23521681d9bbc93fab1fa","sha512":"585b86797bdb209236a5f62948ac53880204e8031ca69cc62fbddb790c72ab785f0fec7c8a3a7958b30f1b9a889a934e03209fb1a667c6ec2ddb45773dc23130","ssdeep":"192:6FUJpTzcUx4jymxEyvpINspg/RFSSJ6+wq8S:6FUJpTzd4YZaSRFSA9F","tlshash":"54d19eb903a40f487764029d3013dd79efecdea6efcd2a81e26427adb8550672d2f194","first_seen":"2026-09-17T03:15:02.221055Z","last_seen":"2026-09-17T03:17:18.761072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fr.casino/matomo.php","fqdn":"rainbet-fr.casino","domain":"rainbet-fr.casino","tld":"casino"},"ip":{"addr":"172.67.204.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fr.casino/","date":"2026-09-17T03:16:38.744Z","timestamp":1789614998744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fr.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:12:58 GMT","end":"Sun, 06 Dec 2026 12:11:35 GMT"},"fingerprint":{"sha1":"1A:9E:CF:6F:EC:E4:1B:5D:82:63:08:F9:01:66:A6:DD:A6:2D:69:AE","sha256":"F6:8C:8F:6D:A5:69:C1:E2:BD:91:53:75:47:C2:1B:AB:D0:8C:B9:8E:34:95:07:F5:9D:DC:A7:6A:07:9F:C5:02"}}},"request":{"raw":"GET /matomo.php HTTP/1.1\r\nHost: rainbet-fr.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fr.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Sep 2026 03:16:38 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSiEaNxw2Co7H59T%2F6Kl2VDmBCPXA9y3o7UBHx26wGT4i28hYnLIsDi2lKZZJ5hVh9M7W29ZG4IiIy5kn2Ghaze97zjf7bc6B58E2oG5Ms7dBohxCL05RpyNl9x4vLpzYRD1dg%3D%3D\"}]}\r\ncf-ray: a3c4f40e28a5b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67972,"size_decoded":22802,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-09-21T01:18:20.143852Z","times_seen":18709,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-fr.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}