{"report_id":"8a437e12-31fb-402b-87f6-3ee22af2e8b2","version":0,"status":"done","tags":[],"date":"2026-07-22T10:10:43Z","url":{"schema":"http","addr":"rainbetcasino-fr.fr","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"104.21.51.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"title":"Casino Rainbet en ligne France ▷ Paiements rapides et gros bonus","dom":{"size":203131,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1556)","md5":"d7398baa131442e14efb6c3c4e3b470f","sha1":"55b1c7f4997a8bf77b57917c0d7dab4873a615ce","sha256":"3da53ba81a6528da554e386f1be2d99208729a3cc4c8f9dbcf2559245008508d","sha512":"05d5dfe8972a8c6307d52c919b4cac58a95ed105e6a19331522c5f1b75b2e9bfeb4129a193d92a5eda1be08c9b6406fb296a61f84e82f386e9bd378a6ce27b2d","ssdeep":"3072:smmIcDWdyxIXHLaViP0uNYL8UXS8Ek8IpckltEdrcx7QOri:CIcadEcLntQi8EkZpc8tEdrcx7QOu","tlshash":"8714e6ae26f411a740c383d27f225b2b7ea5d64bc2168208f2fc4bd41f92c69dc6759d","dom_hash":"domhash850e7afbe6225c451c361d7a9fc62aef","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasino-fr.fr","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"104.21.51.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:10:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino-fr.fr","ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-07-22T10:05:23.91519Z","last_seen":"2026-07-22T10:05:23.91519Z","alert_count":294,"request_count":147,"received_data":4753142,"sent_data":85363,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T16:49:17.055332Z","times_seen":404433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/runtime.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-23T03:06:57.133867Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/app.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"614439f93859eb949774da21bb3b324c","sha1":"96fa5d909ba3a1c7bc55dce813707ff4ceadc68c","sha256":"8de78a081a5fbe1aea6edb6e4f26bf6d36e670a219ac50fb65723c02fa0c7065","sha512":"f05df3dce5b6a9b7c81d1d84035f31289ca915264cfe8effe1b68f2ca0f71fca11bc24aef62957c391002d470d744a1ff55cd5215a1058e98209e7e68a61bb03","ssdeep":"768:toC6iojJ7dLfn7aJBVawnwxw8H9bBws7blPaNdfPtnaaSReFA78iCKkKhHzLzan3:iiiB7NBhvCfPk978akWM78QOJ7mPbB","tlshash":"cd43c75cb38075324597a232425f920ab2767455208ac4ecb53ac8e5bef8c9d7273fbd","size":58586,"data":"","first_seen":"2026-02-02T10:45:14.569249Z","last_seen":"2026-07-22T10:36:34.518655Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4fec30b79ac0ff2f25b960248780445","sha1":"17788d1d89c67872c750e2dfc4e079084a58ab4e","sha256":"a9f37ed3f9f65ee752becd7e1e893ee0781753086bed12ddea3303a276431dc4","sha512":"442074629ff8cb9ef6ec742849d8e661387d194f6e74a0bb47e317f58557a09611fbb03659293c116f7327f55e57a2054f88c7860e15f3b1e2d31a429511adb3","ssdeep":"","tlshash":"6780000808030a22a03a228e28ca30830c02000833220aa0028fe008820e28e80e2c02","size":27,"data":"","first_seen":"2026-06-07T12:37:47.125616Z","last_seen":"2026-07-22T10:11:44.652254Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbetcasino-fr.fr/build/frontend/app.js","line_number":2,"column_number":54895},{"level":"log","text":"fr-FR","filename":"https://rainbetcasino-fr.fr/build/frontend/app.js","line_number":2,"column_number":11829},{"level":"log","text":"fr-FR","filename":"https://rainbetcasino-fr.fr/build/frontend/app.js","line_number":2,"column_number":11829},{"level":"log","text":"fr-FR","filename":"https://rainbetcasino-fr.fr/build/frontend/app.js","line_number":2,"column_number":11829}]},"http":[{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/connie.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.602Z","timestamp":1784715013602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/connie.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/connie.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmvnzgt6o1\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufIegVXk5FdfUYy9U2NCGoKe6kFVbRL%2BDTWp0aYnZbNfkOeDuo4ida5Z09Jl%2BA%2BM6L%2FCGQGLjKBYc%2FE0AMG%2FG6TmDMHFzusY8jwuBDMJlaxPzN3BislaAQsHLkgLhq9U%2FsM%2BW7cZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78308a15696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8641,"size_decoded":9671,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"3c21cbc13913af896cd7543c065d0759","sha1":"cf2809f2183da9725325d0f4e14d3250e87b6544","sha256":"b77f4e1311cab61147ff6b8b0999a37505cbe124bf28c29d800b39fc384dddbf","sha512":"1a74eefb9af3e3d663641622b842db3a27133d5732f937a61c33ee1fd024ffb0e7b6f977223461ebf3bd42d038c36f76ab1e5539000413ac58bdf658fa567a72","ssdeep":"192:1AFC8ie2t/faC7AwloTNNPQyaCOSkLqg249ayVIDl1Zh8Xe0q:yFC8ieW8eoTwjJSZgx9SDlv0q","tlshash":"3a029ebb63b6036af76d3531c0a81c14b722d25fb020cb9772425d232b7a46c55e87c6","first_seen":"2026-05-16T12:53:29.878271Z","last_seen":"2026-07-22T10:10:47.90923Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/agrippa.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.605Z","timestamp":1784715013605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/agrippa.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/agrippa.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmcm4yk5ll\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eos9khu9H4p%2Fcp0RubpkXmVQpuWL8rFROlvSbOueSCwhw2bTWvbvepkoaEwwDQYN5CKaZKYX8tPeC8BeOWEJQifHDs5wlwr6R8xR%2BNsxTvUcKgFWXW4uVu9qHb%2BqCDdgeRP8l4RK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78308a05696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7257,"size_decoded":8278,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"28eff8e19f1ff93bda16a57958c689ee","sha1":"8674be6e17ac82382f652e28b79a63b7ae97c48d","sha256":"c9484284536b3798a3c503daf9ecf665f198f5d7aea68896e9d0cf08ef1ebbb5","sha512":"ad72e38ebad3a7a289ffc2f19b946b27ffc51f712c47a8c91627ec8ba750881f6d9a58b5149304ac629132633cff5cb374ff7df6f070db27665f55dd3d5e5352","ssdeep":"192:eCWwZl5XE27EkRKbcLvEgRs+set7nlZmLBaSFE:eCWwPRCkRZMCsEb/mkSFE","tlshash":"f1e18d571d7402dee8af827882f2c6332b76cc156998760adca1c9453b6500dbf9e526","first_seen":"2025-12-01T07:25:15.397659Z","last_seen":"2026-07-22T10:10:47.909739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/favicon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.275Z","timestamp":1784715014275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eR9HLGYYZZLOUrOVZ7D2LzjNq1Iz0NdQKFzEgY6v1T21sHF7Aapu9CDk9ZVcp0%2FxjPo8ug1j%2F8%2Bh%2B4pO5pxTZ6jtOR1ufXb%2BCT5CJRACqFp0HEDMWqAkR%2B1ILHrZzoyPMBO%2BZTEh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f1a78739175696-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1622,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-23T03:06:57.135479Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:10:12.822Z","timestamp":1784715012822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 2849\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en03b259d4d4d299068c551c9c062c81c0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGwXH37gHJerGOXROCdfE10Mnq%2FMoAKNuVq6tz%2FWnGmz9AfC%2B6XEvsrYths6%2FY9BRPc8Ge9SXeQI%2B5NIYHpardXr4BXMYhivQ7vBCUcQeLs%2B1kQmXT0mf6yHO1nUaR9Iy4c6vXdv\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a77e58595696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":204607,"size_decoded":42530,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1556)","md5":"1f77b01a5e7dded313e1405ffae3d19c","sha1":"094736b85ad9a271ff2612ac113aecd26e5ca89f","sha256":"79dce81ae365d98f2aa1d5cbd3a4626c81cf49f4f73c1f7ec92b0f40bb077659","sha512":"9e32f8ff95924fefd1d9514d5b85f5ec7d922c2d61cb84c1945d1ac8682b81c4c4cdc0c0b4347277b7757839da7183f5def4654b0bacb613c0e62d6a3e617c8d","ssdeep":"3072:AIWxncDWdqxz3CdZViE0uNYL8UX63EktCpckWtKVrd4SxO91:GBcadsWdbtQK3EkIpcvtKVrd4SxO/","tlshash":"5814d6ae26f411a340c3c3d27f225b677ea5d647d6168208f2fc4b842f92d28e8675dd","first_seen":"2026-07-22T10:10:47.910844Z","last_seen":"2026-07-22T10:10:47.910844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":449,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/cosmo.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.596Z","timestamp":1784715013596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/cosmo.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/cosmo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmy1ps369z\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzLL4BdnHo9%2FHspAIax3Fr0PPJ2n5sjr2cthhVCfWz5h8M4nbisuCJc6o2WXOvQo3%2B0%2BSnx70Fa%2FNESeCq6S%2BjqVx7H3hByyGjaz5sjfPZwyForuZLgwl1AJPwrpxZtdeVunHL25\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f89a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8135,"size_decoded":9158,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"71cda44ad1789f6bf92898bf556b17ca","sha1":"5c1b86620a9e211e8dc7e8cd6a5b9aac932c17f0","sha256":"610e15efe2572c77760ecf3ad3cb0525b6ac94a985e2d8f984b8757bff37ade7","sha512":"ed90ea3d0ca99eb221fcc43209aeaa1b884ed8dcf83718b87a471c9e95f354b55bd1ceba0d4232dc6dce87e8838ecf9dbe327b42bda008971e28d81dce85806c","ssdeep":"192:Z4wlDF3zp1Lw/yA6kH91mQBemJdfsOw3wSh28tKleFj708dy9lY:3X1LwqICyemjJawSh2SKUdIs2lY","tlshash":"d5f18d40a2308bf4c83f70b6910025197ea00de6350d67ae4e854a28773dd6fec5bef1","first_seen":"2026-06-08T00:51:55.65618Z","last_seen":"2026-07-22T10:10:47.91229Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-12.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.646Z","timestamp":1784715013646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq762xs-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwV%2FNWMJuA7Xz9O9LFvUh6HZfLhM1vkLOqshkhLxIqwJbcdTUVnUL0jAPZHkdgqdFzv0fGbhNFhUr8hNI1WGCO80Q5U9f19K5i%2FbmiwRyY8d%2Ba4QaHK180HRtsgmKALfadhpKy5%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348ba5696-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3808,"size_decoded":2744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-23T03:06:56.989463Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/golden-touch.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.594Z","timestamp":1784715013594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/golden-touch.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/golden-touch.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedvt5nrpo59\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFlF%2B1G8mGzk9J%2BjfHrcATqCk%2B2XHR5pxhvAXn9JyW4TnG9rh1XIVpoq2XmrMYIEw934CmWTY1HUlhlZXRVJlXajHFiV7JvNMVNRRyZUMUcTtsEr5z4IFdWtwGHss4DRNrCe3X4f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f8985696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31293,"size_decoded":32319,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f22062c9a53902c92949549b4672634b","sha1":"260ea8faa7b0d9d59a3fe0a2d29abea4bf6b35e2","sha256":"5cab06bd287804c654dd719a2732aed657522c12e5b3dd57d5cb6edf79350d37","sha512":"4c4354889f628b5bc3476af484e7d0d5d80a1367480f7955ba24381b351225beecfef7b1101495eb7d75ea32cd1b60da9cead9e82b23564fccd30826448611fe","ssdeep":"384:aJdBQhoPUqb0v5o9OXyGTx/4ZGnwvWcrUsPiH4JajZ8y/VOdPKuyqnB9qPtoUsfN:cBQhab0rD2kwve4qmHpBSor","tlshash":"6be2f1f38d8de3b8db1d432efc6d67a05a828160be942dc6178d1b1ad75f41813988a1","first_seen":"2026-07-19T02:34:36.097956Z","last_seen":"2026-07-22T10:10:47.913428Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/2.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.661Z","timestamp":1784715013661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvw17d-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5swUet3rSM%2F0jQPzrhosjmovBE5U2%2BnD8cWMNJCyDaepqFNg77OGpVtKqg5AjLjGw29%2BXovdq27jnQff8snZLKTRkojbQhC%2F3hCvcZbxLCIu1m9pXEBdLMBfdwJ6XkBNybsgrOPY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358c35696-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1646,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-23T03:06:57.134957Z","times_seen":85,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winning/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:27.867Z","timestamp":1784715027867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"305\",\"810\",\"236\",\"2002\",\"2476\",\"1176\",\"1629\",\"337\",\"414\",\"2415\",\"2240\",\"710\"],\"locale\":\"fr-FR\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsMVOdt2EFzXpNSDL1i4LdGUuXVvfGHbQLkrqbdl7wlc%2FXjiTc9AA7x5UR1WJlOOdA2gC5cNhndP%2FoPPnUkA9E7lQKUrysYoCj1i1c5mTLovDWBLSLwtcTLVTIL9JLHrfzPMEMPw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7dc2cb55696-OSL\r\ncontent-length: 578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7506,"size_decoded":1559,"mime_type":"application/json","magic":"JSON text data","md5":"05736787112821f3cff2df3999e39463","sha1":"4d66ffc6fe851789f4a38f97e7671cf903d0db97","sha256":"ce37f20afe54a796d2bc0f44cdefeb6d97f229ecd312618b1cf36e543809da7e","sha512":"dab32294b679b3b19b48d67a9e4440295a0a54d3228cf766416c89b4e0e453908fa5014c665dd551fdaaffb8c816b86a0181bca5b74e38ecf423e61727d8964a","ssdeep":"96:7fKfYefmJft5fxfhFfADfXYfWfjIfLfVifGfyefDfCZ3fMgofAkfi8fLR1fRfTmx:U/x","tlshash":"4ff180466a62a33f76d360e0ccb3efce1454e962552c8438bdbf1993d7234146f84a5e","first_seen":"2026-07-22T10:10:47.914407Z","last_seen":"2026-07-22T10:10:47.914407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/crazypanda.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.604Z","timestamp":1784715013604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/crazypanda.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/crazypanda.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmy1ps377v\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3hF%2FzHZZU7aDg68FkLfLVOFmM2y48PrrSMUXrrirD9b2GAhB%2BLruoYFwGZ1IML3%2BZinX23WYcfub6FdVIU84EL41gy%2BVvYcqpYGoANPWDT%2FZhH795dIYKgJMs0lfdSMxyX6%2FGwO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78308a25696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9355,"size_decoded":10385,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9cb9b5b9a6978052767ee670fb4082c4","sha1":"44860f9c2b05a22d5d8c85f9ed0f46c498c2b5c1","sha256":"73b334fe92a8e4b0893d8f7165d4408e2a4ae6a28a9ce57dc1a8af49a4a767f1","sha512":"1ee443a9c880a21d369aa8e9d6ef5e63ca21c344dab05244ede14818830b92920950452e2dcd20959326c4c948c242d9124583f45c12fc1122b78dbb29af825c","ssdeep":"192:UWI5PtdZzvIZxBmoYWj+TEfiRlm95vzNerIi3ynrbJsgNhspm:VI5PtdZzvIDhYW6AfiRlM57NerIgy3qk","tlshash":"ca12af00b821af16ff9d893ba2d970a2a7cdd8997552b78fdb065130e33f4a918e4354","first_seen":"2026-06-14T01:02:41.553143Z","last_seen":"2026-07-22T10:10:47.915312Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-10.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.643Z","timestamp":1784715013643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7629u-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1DhP5fANTjtuSaMu5BIZNaXcoPun1Jpc34tJU8jjjBSm68UypWcgs0cwstiuvF6mzzD440wQpXOnNX%2FPLmZmPnQMVh%2FxO168PcBpcb26XzQz7Qqa2yfL3eVbQkIvYF2UKHb2Vq%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78338b85696-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2379,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-23T03:06:57.238264Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:16.821Z","timestamp":1784715016821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:17 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4l5%2F%2BZXvdXdUstRawstap5teK5WoXQExP47u29GKPq16zN2JeU1wAYEUS4lpJTXLfXoir3PkJEofB44D6ut8%2Fp2oZNI8xglDGLpXHrkttpjuVpSjfdJbQ8yFy%2B0oHrzZxCESGeJo\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a79719ed5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":82,"size_decoded":1035,"mime_type":"application/json","magic":"JSON text data","md5":"249d175d8dadfe4aedc59309f6bacc32","sha1":"757ca6595a22760b07bb6a6ed30b850366b2d540","sha256":"9967cfc4d8a975dbb047ad82fbf3dc9872fd9544fef30b871f1ebd65b7bd1820","sha512":"6cc7d25fbabf0a4919917e4b7930b3d49a360620946b32715703b72fa4419923f1686bb2a15c43d16ae376c928af2d3ec4d76c6bfe0cc93733f57948a3f135ec","ssdeep":"","tlshash":"86a012854440681a92a70484048a308491100a03409148241786d8808524101000bd40","first_seen":"2026-07-22T10:10:47.916425Z","last_seen":"2026-07-22T10:10:47.916425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:25.829Z","timestamp":1784715025829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:26 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=le06PmRGoPrGKOvVn0SNpUnry3mZf00Vyk6GqODVQsNdVJ%2Fp%2FF6kbq1p4HCJ3pcoqtCchr4F7eR6WVe1%2FSl%2B60rV%2FVSe9PioDQHKizG9NfHK6pOLJweV1U0%2BOsryPP8kisXvb1R3\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7cf6c265696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":1048,"mime_type":"application/json","magic":"JSON text data","md5":"efacf450df2bfa8df3acc8b0ba53e458","sha1":"b419a151f72dcad2b751be86e8bac67f76ed3e45","sha256":"ba5ebb39d3121cd0d8287ac94b70f0097ffa90e9e787d423e611dae10b438544","sha512":"46baf9f3b8dc64dff693e64d475ed76fd86da4e83e8673fef8ae581bbeeb719c73e138c662bb363f015559077ba2bea71b76e22f868b001c83516958bac28248","ssdeep":"","tlshash":"9ab012bdc200540bc137410e0897758c10b00a0381a0a8002280ee958e60207d117d80","first_seen":"2026-07-22T10:10:47.917248Z","last_seen":"2026-07-22T10:10:47.917248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/the-wild-3.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.297Z","timestamp":1784715028297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/the-wild-3.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/the-wild-3.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedz487frl3i\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Fmf%2FIjxIvmZ4df3iP%2B4NytIEN4bc1QzliA5vnLPXAtJlHvfZDP%2BJnS8MKkzG68r2vLauEPEJhRePEyHjv3B2Veu9PKCXP1pTJ4VIG1vMdXJnsfUzB35%2FaO60SAvueX4zuEvf%2B2w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7dedcd05696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27342,"size_decoded":28361,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f4be2bb203142f0532fc0a5769f9438b","sha1":"5fefbf441895eaaae6c37c8fd0c126686f018728","sha256":"ff9b0697b735c72c241a7617501fcbca97a1a9b925246f6edda05f5e330c3717","sha512":"1c516f9bf547f7d11bfaa71002368e6a2f452fc00f4c8bc4e9fb761a22608e223b5b3eafbe4b85b935eaf2cf208597f83010c85f6db0fa96ffc03628a949a9cd","ssdeep":"384:vgAObh+a5CmzdWT3dW53Suk2sPIe4EDTa6NX1FLNhRD7z0SZRGF4u9/wo3E7ZAjG:vHPehWe/sPEEPNFpzdISZgFlwHkRMv","tlshash":"4ac2e1534a58f8866f4ff1365d3b0877f462d8e1cb269c242b18f5670b3bb114d91838","first_seen":"2025-10-08T14:20:42.549276Z","last_seen":"2026-07-22T10:10:47.918096Z","times_seen":4,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-8.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.641Z","timestamp":1784715013641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7616h-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IzRZ9hSInpkc18Nx%2F7fx6ft5Y1zyCj3NkI%2FcMVf6IH71kwfvLLZs2pFkrG3yOGlIyYPNfiluYW9%2FDg%2FVybQwDX6f64yA1jDrODmZ%2FcH28JZYpnxjAojcfEQKyHdwEbbqmG7Y4zJ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78338b65696-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":1722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-23T03:06:57.247896Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/jimi-hendrix-online-slot-touch.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.299Z","timestamp":1784715021299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/jimi-hendrix-online-slot-touch.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/jimi-hendrix-online-slot-touch.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedwqhw5nkjd\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFEY%2FBC6M0JnApeSuHwqLmTugLhqjv0ST1SP1xa2eFV0APkL8nVLK%2Fx53NlbNX7eJkz6OTdw3iFfyX%2BYxggd3mZCmniiNfORs12UpJ0iSjzMHJG%2B54ujzoRKUI%2F5SDdM5BubTHo%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b035696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26617,"size_decoded":27656,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"95e2e569db40c116a938c9f4fe95246a","sha1":"44b5b46237f650f7b163db6c4253f36285ad78f8","sha256":"b176b15101bca266f845cf271036a128db0afd94f2b54d8392477b1ef7b89440","sha512":"7997a8c6d913d85ea90029fb7ac2ac18b5057b8b9578b334ec7c934f6ff4610f6c64212125bdcdf140e912c11bede3ca79baeb034aaab0006cd19a1e5c4980ce","ssdeep":"768:gfP13FLrtZhcUfLkD3uj61Y7uIUs5ACc9X:gX1VlKx1Y7tU","tlshash":"3dc2e111917359a5c2ff002afa261f8bf44ce9c17da5815a9c93dde6c32acc2379dc54","first_seen":"2025-12-20T03:40:23.641487Z","last_seen":"2026-07-22T10:10:47.919139Z","times_seen":5,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/deco-diamonds.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.592Z","timestamp":1784715013592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/deco-diamonds.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/deco-diamonds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedtht2swlo3\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUATnkcHm0PwDEwpXh95UZh95PeE2Yjr6liHuhAyWT2juftGk8vLEzkVSZjm6OigOSJBjUxc5QfAHElSX0Syc5ZnImOWuYrZ%2B%2BOUqthMtW6aAthypSBJaU8N6kfh%2FQW7WbcngQZq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8935696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28083,"size_decoded":29108,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ee3c53f5a34a3765a9878a81ed4a6ff0","sha1":"d983f2013de6b6d626c278587061433af6ca9394","sha256":"35f22bba2e7b89d6c57375825b165c3360c8bbc1b84bfb25935ae123d8e800f0","sha512":"ca2f6841623ef6d40510fd5d8fa0e9300accd847d09ecd58d58842679b7dbad2c527b27d744a9ceba6cfc3d85b2082d76a81b491c008cffd6a2482b78b38bd9e","ssdeep":"768:h3cWSeQ9yNsyBoyRia8fiM9zGNbDf01ExwVbNIGVL:dRQ9DFyUNfKVrwgGVL","tlshash":"f5c2d19ffd1cd9127b0e7b73d6836a7291eabd63bd4f02960b0611c81b541c84979d30","first_seen":"2026-07-22T10:05:30.541427Z","last_seen":"2026-07-22T10:10:47.919589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/bridge.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.614Z","timestamp":1784715013614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/bridge.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/bridge.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmoisiy5io\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnU4GFl1xYo1pVQfljgDhRwGSO1VYHwePGsrx3ffqrn817dMEz6OY7%2F7YL5IzrFiZ7OQVKDImQhemBSO1cdaIOWdtx9jF4Afk678F%2FDgX7%2Fd37bEmU0a5R3Dy5pSwNNX%2BtrazHBv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78318a65696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7152,"size_decoded":8174,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d465ad4085301c404b18c6231b9467b9","sha1":"0f5b2d073c716019cacdc0ab4f4ec4e81f239d4a","sha256":"9191a99599f0bbb0211077de8bb79d7865f40ae5c27f565e3f15812afc1b8f9e","sha512":"506556b63370af61e5a646a01f6ce08ebe2772feb9c3bb22a12c1be0f6a308894d3c0b47413d2940e29bad0b193402f596b4370212d1f60a50eada10aad878b9","ssdeep":"192:VZWxYYpiVWrevjiF4LJ6iWGDeEaD6a7KsgcPoVyUjvOkxU:VZWxFrevGP3osgRUUike","tlshash":"cfe17e113fc8b017ee3e8db516424021a726b864ebcb4252bc7dde20376f29506a35e5","first_seen":"2026-03-03T13:50:30.643869Z","last_seen":"2026-07-22T10:10:47.920472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/flags/.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.621Z","timestamp":1784715013621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /flags/.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: no-cache, private\r\ncache-status: Souin; fwd=uri-miss; key=GET-http-rainbetcasino-fr.fr-/flags/.svg; detail=PRIVATE-OR-AUTHENTICATED-RESPONSE\r\npriority: u=5,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sat, 22 Aug 2026 10:10:14 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZ51xx%2Fba9ygaCBFVBm2Aw8xGFD%2FBdtD4FDOeT%2Bl30E9W0YjwFOyb00F9n81GhaUwekX9c%2F758JyYKD%2FclqMgJfP1wToZsb%2BemOpdwvC66dJEqm2UWinMm%2FC2G7HrEwZ3vjzP46e\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78318ab5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9102,"size_decoded":4980,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1482)","md5":"336f5653a5ef8b10c97f0617292a45f7","sha1":"4f2749f0088696a0cc64f1b3685770bbe4c07b18","sha256":"611f6ff570768421d9d1e9ff72fbd08b3232921a78e82f351fb6bd450aafd4c8","sha512":"50dfbde0b22eca19b981251d0754917a343193bc4304e1718e6eca6751d7f5ac6527fb75c5640b90bffc5075069ad367b698043691cd1289b77eef580267f86b","ssdeep":"192:eZavFouMxljMurRwdb/lIMee2QMLpHGFTYgHi1:eZkouMMMk/VbspmBlK","tlshash":"e21295dd3f745cc544d887db7f02a4be6d2350b74a914d0cf19c4b4a2b82d2eac6aac6","first_seen":"2026-07-22T10:05:30.642726Z","last_seen":"2026-07-22T10:10:47.921004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":998,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winning/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:34.866Z","timestamp":1784715034866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"2332\",\"104\",\"2293\",\"750\",\"407\",\"818\",\"687\",\"1187\",\"2590\",\"595\",\"1216\",\"1671\"],\"locale\":\"fr-FR\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BtxzdGyhoLGbSekP5exBunJeYmYTyX4GlYt0k70ew3rEitZOQwnfq%2Bg8aBufV8DZ%2BHMR4f2FyUNWEjKhSG39fmuPnUnQKnL7AlGF7qYaV7gu8VpwWWvb%2BhaDvHB%2F13ibHWILbuP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a807ee4d5696-OSL\r\ncontent-length: 581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7526,"size_decoded":1568,"mime_type":"application/json","magic":"JSON text data","md5":"c1a48b8a1eaa0eb964395b2a40f21f98","sha1":"84f84316cc3d43536a0ec39fa24591545c8f2103","sha256":"c5ed6ec36aa823017acd94ab7197367fef649feb1ba133a5ce8032cb8a1764c6","sha512":"1fcfe99620e0c25db688776ce6a46a9327ae4960a91dfb098ab12a4623f8ac4f113889affa06aa75f0f6c8918772edfa960e38c1b0754de044f066be45a875f4","ssdeep":"96:PCfVfvufufsrfEifbEfwfuBfwfVWfCSf3IfMefIzfMBfS1f4fZaf/Lf0Xf6fYcfX:W1","tlshash":"a4f181466a62a33f76d360e0ccb3efce1454e962552c8438bdbf1992e7224146fc4a5e","first_seen":"2026-07-22T10:10:47.921578Z","last_seen":"2026-07-22T10:10:47.921578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/guns-n-roses.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.297Z","timestamp":1784715035297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/guns-n-roses.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/guns-n-roses.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedvxx4eadlt\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khjIQmRLGx65JMhx9kiTYmVhm5HCz7WcLUwMKR9zRGNRP1VDhlVPvu%2F5NTWJbW7skLgX7o4iCq4%2BJQvd8abiCYpmo6tAtjDtwfXx5FFeg1salUU%2FksSpk3IU7RFhWH4VKVz7PM6K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80a9e895696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17633,"size_decoded":18648,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ab383d349188b60f838d1add040451c0","sha1":"bdb296e9f1b5171b14afc910a4e4fb54df88787d","sha256":"5914c65021ec42efa3aae8b9dca95b4b4e3ecdaa672398a052bbaa827fcc21c4","sha512":"ebc99cbde02fd469f2920aeb8fc19c20e7c8b0be8c621dbb9c1999127f22eb9c1cdcdbd316b7e07ffc573ade75d23ae394bbd9a4ac85d36802465ca741b6c294","ssdeep":"384:cjl0fduhedtzLjuIVMGNINQKtRAkO6CBtmJnAitSuXsOCYxWsiDPu:cjOfdzzHrVMzNDtRAkJ4WAt3B77zu","tlshash":"5082c00778fe6a0ad72c0773ba47a672a5138c54d1423e0ae4e27f94e70eba51a0ddc5","first_seen":"2026-06-07T21:45:09.796287Z","last_seen":"2026-07-22T10:10:47.922456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/app.css","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.532Z","timestamp":1784715013532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvh4dqi63v1jhp-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeGLKIR8K%2BmWW6y4%2BCW8aWOewa2NPb6JcqABCA72Qsn%2Fjy2vtt9TmcqStdFyblTy2pwUhn04RS7S4tZHstcGFXEc1jw88Cf5u%2FZm9R1%2FScbUXS5c8T3B56umfSAUiGXBTOjTNJIM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1f1a782887f5696-OSL\r\ncontent-length: 12073\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71917,"size_decoded":13125,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"334453533e0b791cb8c9694dabbbd427","sha1":"4a95a1a844fd616b9c419e1560481df9f4c8d182","sha256":"5f2227106fb0ab5532f7d3272825d7727a807a801febe81f54f9734b798ae1ca","sha512":"9225569e6c3aab93a72c351c361bbd31e3ff343c6f04ccbbdcb7cf8992c45e3c9730f9e83019d09c72b57a89b1d340714b6efe3c606630a45583f57c268171b9","ssdeep":"1536:LZy9nG+V3kH+zwCuVkkBxfD7tOrHgUn3Pb+Qv:1cr6Qv","tlshash":"fa636423365a203cb43f8465a8d0a69d712cd407e76b57fdee526175c9cb2d32b32b88","first_seen":"2026-07-22T10:05:30.59585Z","last_seen":"2026-07-22T10:10:47.922937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/great-ocean-platipus.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.579Z","timestamp":1784715013579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/great-ocean-platipus.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/great-ocean-platipus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedvxx4eaohm\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YThf4D0VtvGMixoKiDgdnvAKLCAXYt0NTWgYdQfoaAaU3WmmxQ6xfrERHzjb9ujhyA1lpQoRo%2BZBxOr2LMl5a82WAA9bcjZl2Hy5%2Boyf5muH4gbBwhOPBU4rhVDKcb2WunDmpapC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e88d5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31738,"size_decoded":32768,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"6bb2cc1d46f41deaa58aa2dde6a5e573","sha1":"7c63d173f6f9446f59db53fae9faf52e4741334d","sha256":"afffbc8d58ab5208e23ce7393de51c90aaffecde1c5d03510d27c69aedba15b9","sha512":"e7f564eb9db4245c790b974739a93b85bba19fabdfc31de99e1332b728ffb5d3fee19061e9ff6c6621321a40a1e0a1bcacccdfbd99aea5a983d71e96a3f3d3da","ssdeep":"768:qB5o8Lt0ajEV5IxtnSUE03VBW3hzYBGEs+mRHUFduaX2A/:qY8LGaj2C3Vns7RHIoG","tlshash":"33e2f150f7509d5b9a2d07605a2900cc7f5845c67aca1d8bab8033a48ffa3eea375d73","first_seen":"2025-12-15T02:33:06.006904Z","last_seen":"2026-07-22T10:36:34.540635Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/mutant.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.599Z","timestamp":1784715013599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/mutant.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/mutant.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedolkzm462t\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApFsHd0jtsPsSdFygbVfjLeHpPECsYwOWB5MJT%2FG37QA5iMhyLSmeAvkP1vLSuqXRdXo94Y3Qc39fbwWn7VAkzHr5vvRGmhKB2GVFJ3MADottwFsGk2YTK5BmGFNR07v7d0ctUNJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f89b5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7877,"size_decoded":8893,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"b3b1e5335a0ee18f5a40b4e9f65801eb","sha1":"8bafffe8c5555bc103ae02b3b46c3644955a6f53","sha256":"2867c5f132abb70e1e337f85587ecaac18ad838753316eb1c0b215b657f8a097","sha512":"23056612af1c430d6e6de7884675fe5738400ce6af77b1b9181cb38ac4e9d33df6335024bc5e9c2a0499676b29d6c7793382ceb4a671a27ef77193ccc533632b","ssdeep":"192:ePTMlmzxxfkUOagsKfcxFP46LXPUSzlcksM:ewlmzLBQcn7shG","tlshash":"74f17cbc0fe0a401fa6f8d35524327c96ab49c02f7c51de61a4a150c2bfe8d9f9450ab","first_seen":"2025-11-17T13:48:13.520479Z","last_seen":"2026-07-22T10:10:47.924114Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/3.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.659Z","timestamp":1784715013659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvw11l-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpuwPJFvyvX7hVP6iL01QYm6Gp3Ky2wwOv9Jf%2FnhTq5umZbUs4DgxHKig58BWyYseuTTGTO3%2Fc6C78gQCvcBgTG%2FENBJC91PFAtQWjQ91Kv0mWeT1wbDXn5HGDaDyvnRyhhHSx7F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358c25696-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1716,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-23T03:06:57.030468Z","times_seen":77,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/dmca.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.671Z","timestamp":1784715013671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvw6v2-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpP8OsEXNJ4Lz0WzPWJykhiK7wn6fc%2FVKLS5RgJfn66DgIxA072RRlEUX%2FazmT90YVO5L2YcUaro47kgnRVCJBi8WUxCG%2FNZDFy6%2FmqTKHT3O3L6lKkzHTc5lNr5Z7nbQ0J%2FmckE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78368c95696-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8894,"size_decoded":4583,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-23T03:06:57.033306Z","times_seen":84,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/a-dark-matter.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.593Z","timestamp":1784715013593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/a-dark-matter.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/a-dark-matter.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedq4cstkcn9\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8K1IQNh1VjONFYW9tNywGI9mUhzkhSj95t7LOLbA8nAs5g2pN1yXqu3PazcM3zKjAtWEOiXBthiZDHb4oEiW%2FMzQ3A1MPxbgHIFrcB3XGl0g0S2rMvsyIRA5ZblSV28AOxjDpE4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f8975696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16389,"size_decoded":17410,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b2a79227372fc1a3b29dbdfb2e290230","sha1":"162573244b91faedfdaf04604b3190541eab3152","sha256":"35b623677986f53d60f9499b826ec2c07288c4d5a589b8766c4a88143b65c069","sha512":"f537f0c07073e7a457a2d23515856a3939fb103923d6abf4a31a41b6c691f47cdf6076a91669edf53ae3ba353e00ecedb2012c38bb14ad6f0a0c587699b8b0cf","ssdeep":"384:nmsYf4oVGTQNJn9LelhynbCbeOrQevvTMSE/:nh0438nbuHrPnTz2","tlshash":"e872cfc6522a9777e51a4be20bb1e3335777dc85d5a09f8e84397432b3cee401eb4a12","first_seen":"2026-07-22T10:05:30.64812Z","last_seen":"2026-07-22T10:11:44.540245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/baner-1-69c5656d634a96.53107331.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.562Z","timestamp":1784715013562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69c5656d634a96.53107331.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/baner-1-69c5656d634a96.53107331.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcxh7h3r01sfxgq\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69Yz27mp6zwHE5imX%2Fr%2BiG6YtDoRIq5ziNZhpvg41W0oi0IVu10VIq2tun347E%2FZp6tRp8KarLGzx6SdUIn9mqPcaKNVhdbTv0caUPotOhPqrZjdl%2FVwRcTbDLfC%2B13Oy%2B%2FJt5A0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782b8845696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":743210,"size_decoded":742732,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"9bd808e556852a7ad1e8b92c82d8164d","sha1":"095a8139db7dc5dd4e8f35e2f182661902504bd6","sha256":"67c976f47f1f8452cf1a1a930c7d41cfedf06c46d7fd62dc4047a4753f4a3496","sha512":"d282cd02a0bd8460f4614aa11097272799db26ec064c27492d9628457c07152df9b1c6166c587d5148681c0100b92ee1ef02c7dc8ee3d7a7b73de462eda0d467","ssdeep":"12288:53IdOhlhIAdEw7CgRCQyj3KExNUgnvvd2HKzMBBuRv8wQ5JuP23m9EkBURBY:BS2lhImRPyj6mNlvvd2HcMBBlwQ5JueO","tlshash":"f8f43335aa0b833fc9bc4a74b1d6297a541249ef112f043595209e64f88b2dddfcbe1d","first_seen":"2026-07-22T10:05:30.613615Z","last_seen":"2026-07-22T10:10:47.926219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/arrow_right_icon_v2.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.568Z","timestamp":1784715013568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTtx2I8QmTErlvLjn88pa8LlXqCo3BFPTXnd3TCFqvq8lh6HZ4fzMNI6PL6qMiDp3WzqPmpUhezHzEVVU96TPLtZ9FNTqRmf17STzk4i94cOzFdaiF5wleN%2FaQhFWsgV8TJV%2F0TD\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcver8zkf2d9v\"\r\ncf-ray: a1f1a782c8875696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1186,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-23T03:06:57.029736Z","times_seen":56,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/the-mummy.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.289Z","timestamp":1784715028289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/the-mummy.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/the-mummy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedz487fretn\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIbpDxnhzWJGc4eri2YatWQlXd%2Bie7eisTGSnVq2OyAt3WfdFUKZUeE1DENEpYTjc%2F7AGKW4P9s%2FQDEILdFO51IqONO188hElLbdLPHRWYC4aH8T3cB%2BukchIoxGjjPevJLgwXjI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7decccd5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19211,"size_decoded":20225,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d8382be7037c1ab8554d99c127d994b9","sha1":"8a222843cba8195d5e1ca2373c5122f8d479d1b0","sha256":"c455242dc012dd91bb69a10c658d0791d487efc39ddd59928c230baf19555410","sha512":"57ad12ade5bbd2f3f7507f90e33c90ded390658a67294aea452690b15f24eecc3f504dd22cf4087b9fff90564889499f9cbcd2d10234e15f39529b3c028eade4","ssdeep":"384:dmXbk4dhUnAx00gSr1P4jgafLH68ZCHasTlmSnsYkyJ/FkmSwQKwy3Cj:sbZdhahSV6C6Ol9Nt9kKjSj","tlshash":"1982e0913f858c50d63d15f130608a061852cd6e05b0f766a5aa17971f7d2bafc30bde","first_seen":"2025-12-01T07:25:15.384609Z","last_seen":"2026-07-22T10:10:47.927273Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/railroad.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.588Z","timestamp":1784715013588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/railroad.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/railroad.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedy4i8qjo7n\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCvRScpR5BG7VIPMzCYTNknzKxmH%2BiYcfBx8Z9ucJk7DN2P0VLed0W%2F5ZCGv9MCb%2B5U8xO5mJxaysctndDALrgNsS152feDl%2FSVLwdGMLqe3zX9uchatz8AwPb27jYQ2cWh0NzYW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8965696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31379,"size_decoded":32401,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ea95530b7cf388d60d89249ceeb267a2","sha1":"c26e84464d6e4ff9b7719e0966e9e7ffc3af562c","sha256":"394a73d070c9fc889aba14c555e32774a797979e62ad7d67dcdd695431756952","sha512":"37c8fe3df38e19685b8aabde131edd1a8f4c5016b14f47ce0272de2586f7224cd4760ff3ee55ad436c0b552109f0b71ab74a868376d0978ba09167a2ba63bc31","ssdeep":"768:z8yDivVKtjarKzraPA8ElqOe3d0XZPiaPBiZr3lLR/wW7T:z8yDoV0Q6aOqT3dGMgiPF/5","tlshash":"05e2e1267b6fc122b81fa924d4dde08901c4f37a52b9a3a274d473989368ac0a4dbd4c","first_seen":"2026-06-15T02:37:07.697979Z","last_seen":"2026-07-22T10:10:47.927887Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/nightmare.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.601Z","timestamp":1784715013601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/nightmare.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/nightmare.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedonypxe5o4\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FluHlobnAOIfP4qS45Py%2B8AG8uTensCL4EYG%2BwoMaOX2TNfEsodKbHVLmT5GKnXZ%2FfL0nldid0q%2F3TPl9K4MqmLix9nxj7ye49%2FDb%2Bw4PAKAbDeiwPQifgJEGr%2BW15xBH8bc5mUB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f89d5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7348,"size_decoded":8379,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"74f4480efffafc2e76569219d8bbc4f5","sha1":"1f487249880dccefaba082b08294db1bb2406da4","sha256":"32a6369c195b868517034c713c1e036f64462ad944d5e944a983d89877879571","sha512":"3f86a97f726b39845d9857b8f05aada4b7a56c0549135369ff07d75be679a3daa7448cdc49a5874181a195b2560aa8d81bbeb4ebad2cbf8ebd8cd6fbdc9ad516","ssdeep":"192:V95RGFfbgQn3zC+jO10uPmIx88bne1aoCzm4:zEPjPXQk8bmHCF","tlshash":"2fe18ea76954a1abc9df953e6275638283c1f7d13b097332320e2515bfbe209028934d","first_seen":"2025-12-01T07:25:15.402024Z","last_seen":"2026-07-22T10:10:47.928404Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-6.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.636Z","timestamp":1784715013636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7615o-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDl1ooa1h9Luj7xECknlBcrzi6D9fbeRyFLjai41%2FGR3%2BFOknWvosd0df77g68n2Cmi5O1v%2F3DV8Jx%2Bvbn4CtT1slE6njTj9PWkmlvqgAqwoz5hPTKzlhywBDC3JwTIPiA4Zz2FA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78338b45696-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-23T03:06:56.993466Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/immortal-romance.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.302Z","timestamp":1784715021302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/immortal-romance.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/immortal-romance.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedwgyywiihg\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8vJnA8b3HK2V8r3NcO0XsvC3ay0sALg8tyIntMF7Q5Z5yiParn7Bv14Kgzxo7T2I0LWDxr3WneJbxqRYyKyKyb1HWPDTKV76j82eV6xJHjRG3xP13fUvUMMVrJ03XonBkGcMXao\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b055696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23956,"size_decoded":24969,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1c232ced67c0fb95c5fe4e39cbd1531b","sha1":"30514e392b787a06ca907f75d98d3d23550e7e28","sha256":"467972e717abd1f1f39832ab6f9ae6ac3e702a54a1c6490d5edd18319709a8b0","sha512":"d9784dbb99eb8373d67047f6919b680070467e3e119fde0f3873913c663fa8ca0b5b6dcc4f5c44ceb714932bdd7a57a6d360ef60b5a210bb0971dccbb963b060","ssdeep":"384:Mb86fjbGoNDRoHxxM0rwA0vStIv0NgFO+7RquPvs8apDY3teLQZv1nOH0M0EMBHI:y8KjSoNDRoYhqk0NM7/Pvs8QYMsQMBmR","tlshash":"19b2e08aa1b0c5388d1f3ffc026c3d113de8959e3dd2ab9acf98165597c13f1a05131a","first_seen":"2026-01-04T02:47:04.091306Z","last_seen":"2026-07-23T03:06:57.01854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/app.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.555Z","timestamp":1784715013555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvh4dqi63v197e-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9l%2B8lsirG4chNutjMdHN3A0FvbUXWkWtOXOh1K2FAw02IXPKzx4BpN50tNJfKamawy%2FdiQmf22fTK2bf7eK5N7gnj0sl2Bk3qYGF4VNH6wSqqQmiyANpvI11WIaCekASsyTaNCX%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a782b8825696-OSL\r\ncontent-length: 8052\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58586,"size_decoded":9105,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58525)","md5":"614439f93859eb949774da21bb3b324c","sha1":"96fa5d909ba3a1c7bc55dce813707ff4ceadc68c","sha256":"8de78a081a5fbe1aea6edb6e4f26bf6d36e670a219ac50fb65723c02fa0c7065","sha512":"f05df3dce5b6a9b7c81d1d84035f31289ca915264cfe8effe1b68f2ca0f71fca11bc24aef62957c391002d470d744a1ff55cd5215a1058e98209e7e68a61bb03","ssdeep":"768:toC6iojJ7dLfn7aJBVawnwxw8H9bBws7blPaNdfPtnaaSReFA78iCKkKhHzLzan3:iiiB7NBhvCfPk978akWM78QOJ7mPbB","tlshash":"cd43c75cb38075324597a232425f920ab2767455208ac4ecb53ac8e5bef8c9d7273fbd","first_seen":"2026-02-02T10:45:14.569249Z","last_seen":"2026-07-22T10:36:34.518655Z","times_seen":21,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/cashapillar.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.577Z","timestamp":1784715013577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/cashapillar.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/cashapillar.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedsaxx5upcj\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBrTIQMLhK%2FNCIeNaG9uE%2Bd913Qo8pjEAyG3SAflzELQo9kZmVCVAjzrT%2FuzMZv6cb%2BJMDtj7kDj7ta%2FxaPYIUSE%2B829ZlT89oJsV9fjKczbA2waR7KYS89bEdyMtU0wq6jAVZW2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782d88c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32851,"size_decoded":33882,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"bb81d1e2bc85c6653b7d4b3800c8d808","sha1":"3ab7fdb996be48a93eba2d8da6d6f5e043e8e96d","sha256":"2e1aa7abf5173dba5855547a85df5785dad5e39e0f7ff8c5fba5c66d53e6b52a","sha512":"d79f083184d90112e4dd84f2ee37ba9e9033940912dfdd3c7a87a311b82decadb3a46104bcad98759a697e6d5aa7e0ce715b8a738ce40a8729f6f7e255c093b6","ssdeep":"768:7YNoNQfK8WYoutnwx0sx4b817++NFx2LPQLnuOz47UrtH5IS:sNoNQZ+utnwCsxnUIFxWmVz47UrtCS","tlshash":"b1e2f10fd651e552a17ecb2158bfe51f020e990881b5cf6fd80d8326436d0f921beb35","first_seen":"2026-03-21T02:18:55.605978Z","last_seen":"2026-07-22T10:10:47.931116Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/blackjack-silver-2-evolution-gaming.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.585Z","timestamp":1784715013585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/blackjack-silver-2-evolution-gaming.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/blackjack-silver-2-evolution-gaming.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedrdlorwlij\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOiNvhKQWU8LGI748R%2FCuWtQbZntKtJOe%2F3eUbSZX9sQW%2Bks%2BK6Pz0GbHWXohWfILQ%2BenEEY1lL8aQT%2FZCNChx3dMRrRgr%2BXx%2BbTGQ9TRvDU0MZSVGgMWEKQe0w9FhEM3TbZAxQm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e88f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27883,"size_decoded":28940,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"57dfc611fbe2cc9f34e945224d759875","sha1":"3e393d2dac4b92263ca62ab567a463d7051054cd","sha256":"866002b1428853cdb3617899cd0f03548a7e002885db174d922821d18979e2f3","sha512":"0d2f8e3275793f8135ba8ae505aac2f1efdf39c8cf02a0383bf0ba0794b5b8404c46b3e6f193cf714eafb68bfe2047b94c5f02f46c75bb7094d72c73c5662f9f","ssdeep":"768:OebTnovPetdnDK5U+wkPnu/b82ziEVcqhRPmNzII:VXo3ethW1nu/cEVrg","tlshash":"b6c2e16e77b552bdaacd8780089eb7f227e1066f9006a5bff5d43211cf3504b8a9c0a5","first_seen":"2025-12-01T07:25:15.379086Z","last_seen":"2026-07-22T10:10:47.931613Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-1.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.627Z","timestamp":1784715013627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7617d-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gkwn7NTru9zQ%2Bm4GsKIlTQftffnOeAUFQCYUxwE6iT0n0slag8iBBo0xFj7SB5UrWYuPBYykwXLbxaolX%2FSiuwWTQWIcY1Znq7TVZTXBUeejTF8OOpBmRMBQVWMNPBomFH0ivDs%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328af5696-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1655,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-23T03:06:57.130149Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-4.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.633Z","timestamp":1784715013633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7619b-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQbm%2BYleYXrV1f1F91mTyBpvJkJFagbM1Xy%2B8YxcqI%2BvW583mdEQsjrzcuTOCd%2BvA3U4XSjKl%2FywT3o6vxI59Ic0So6VfMEmmER9Pdjl1LeNJharg%2BRm8YcplWQfzTsgzBwTl3KR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328b25696-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1631,"size_decoded":1802,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-23T03:06:57.148079Z","times_seen":73,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winning/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:20.865Z","timestamp":1784715020865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 107\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":107,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\"],\"locale\":\"fr-FR\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jh%2FI23mnWjOJZxspltK4fpbbXwZ6pCV4sJ8GOve9CBt0P1U4DFHYiU5Ju00Qhr2GVT8dEJQWbNZM2BZDTztaaTeBY7gbnpoJ0RpbYYW8vUj1a2OOCM17o%2B1hOz7mHlOcjIuQf%2BSn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7b08ae95696-OSL\r\ncontent-length: 565\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7509,"size_decoded":1548,"mime_type":"application/json","magic":"JSON text data","md5":"7b34c7e5b18f9c0be6c97fb1fbe4b6e6","sha1":"64f300e0157cef8b356d8fcb0b37020c50e54c9f","sha256":"92ac9a91d8819d6f6e5f09b444922f0f66a9574c197af53f200ddb6dbd876003","sha512":"afd0f0452251c8b55896eea47b4b1e8cf8b5b108ff9af813da18d2b1321b9af46656b572ebda9a136ec76238572a3b80fd59054ee9d50354763fe3871fb524c7","ssdeep":"96:jfM1fzwfwf/SfYP5ofaRfJfLWftfymf1xfW/fqfhif8fyIfMoqfC1fYXfEtfSAaC:sP5Yae0O","tlshash":"25f172466a62a33f75d360e0ccb3efce1458d962952c8438bdbf1993e7224146ec4a5d","first_seen":"2026-07-22T10:10:47.933156Z","last_seen":"2026-07-22T10:10:47.933156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/leinonen.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.268Z","timestamp":1784715021268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/leinonen.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/leinonen.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedo9oc1q4vs\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HScaESZgw%2BK%2BLF%2BBt3%2B2I48EnXBqOBqe75r2eWMOq3sJU7jq7NTSJWb7IlOG7nj%2F%2Byn%2B8%2BZhtdH2EMD5UGq7H%2FpMi8uYExdqhKKzr5YAs%2B9MoUYdZjU6K8D1mDQNJcqKFAFATOA0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b2eafd5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6328,"size_decoded":7355,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9bb4ebfe5ff99c00446be2ed2710176e","sha1":"be7157ee239cf84cb93aa979a6b037c1950a55af","sha256":"0c37e1dd7e2118cca40f8b59705fedfaec9f533f6dbe36daad16394860704d51","sha512":"b6da45c3970bb6c34d16a8d2f26e47684268ebf9fd04d14429073534bb27efcdf41a0733f7d5c3e38d8ef968edac060ddd2039f29194f65b4321f661dbe4232f","ssdeep":"96:pinIDli5AVTmNTJ2veA15dnRxqyPESpMUy3kk99VuHo+1th+2M7CXhcqJ8K6dWp7:0IZWjMvDHyUBk96HZOpC/Jkkg3Za","tlshash":"28d18e1327b70ec7f03e64b2939155203540cd22fe2895aae8c93275dbb9ff5aa17319","first_seen":"2026-02-01T01:43:13.946022Z","last_seen":"2026-07-22T10:10:47.934096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/super-duper-cherry.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.297Z","timestamp":1784715021297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/super-duper-cherry.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/super-duper-cherry.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedyupa6mqiu\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuHt3Gvqiv1SsqY5hhK1GOHQ%2BoLqv1XBVEYtTsbL%2Ff68Up%2FWp7PD4a6b2QuaRXDrdNe5ihrvSZ5K2KCFbTdvmG3jbY0a%2FBZUwGuf1NUsZxCROx1qIHqvrom331IG1NS7x0tciAA4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b025696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34374,"size_decoded":35397,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"a5e0650b2d005acc4f61bd3141cad90b","sha1":"b592557b500e2bb27d458cc0a80786e7e8c98071","sha256":"8abe092ca8f3439ee494d80aed05c18897cc997be486161b86850aa1667260ed","sha512":"87a9cbd54e45ce68e60af5981decc8a05444f1b71c7bec5303b24778abb4859cc284c711721ffce473350303dbf4febaca9f276febb952e82c7a075923f2248b","ssdeep":"768:NiODFzFIwPK5yB8z3D0/Rig8IKvZLF+XbmIeGGdCh9hIt:QoFP8zzFgAhMbmIVh9ut","tlshash":"a9f2f25fd1627636ae6c8f22a2773fe74f2ae28b414279419bc4d31433a938df274191","first_seen":"2026-01-04T02:47:04.209852Z","last_seen":"2026-07-22T10:10:47.935352Z","times_seen":5,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-7.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.640Z","timestamp":1784715013640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq761f9-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmJgwSzCLjh%2BzoqWhZpY%2BhWeGZSry8ldunuogCqLo4cKLV9%2B9GQZiiC%2F1itcl%2BYIb0aQEUsufw6rQKK0nyhi49eSLYNfAR7bR0ajrtmpMusmT1FETggksWZwS0YatEgNbWDFWn4O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78338b55696-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1845,"size_decoded":1905,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-23T03:06:57.237709Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/forest-band.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:18.147Z","timestamp":1784715018147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/forest-band.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/forest-band.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:18 GMT\r\netag: \"dhcvedv0kw0cmn2\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyFdz03y9TCH39GIGVSnOHNKiKCGif8Jc6f4BaLCtnso4hWWtykpZ%2F2glMzQnZGoWWUpX9lSyT4dcPYe41i0F%2BFN0j4fguMqrJiu%2BZi38rxUCP8r9o7JqgJAAvidEbaeZ6akOScH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a79f6a1f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29342,"size_decoded":30356,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"16c2fbce9b893ba2f21f32d13c059d61","sha1":"b82a51972e7fcfa59ac9d0431ad116b35f314a30","sha256":"fd079c029550bb3c619052aa97e0c26bdd4025669eb71a618d73ae8686f85bc8","sha512":"fc6cb66bc4086ffc0bb09205a44e4414bd621490516055507868f9039c8939d97dc9dacb8830d701b7dad8c0e5a5ca84e2b639beb10154633af09f3014db496d","ssdeep":"768:eOJcm879XrD2Ocjq6HC/FA6Yf6x+76YyDbeoMX:eOJcLtuHGSSq6RDy","tlshash":"a7d2f10149068139f078c596e1ae0820c7823fadabf5976f3908bf175fa63d7974a037","first_seen":"2026-07-19T02:34:36.179314Z","last_seen":"2026-07-22T10:10:47.936352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winner/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:34.876Z","timestamp":1784715034876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fr-FR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"507\",\"659\",\"154\",\"21\",\"930\",\"370\",\"529\",\"533\",\"235\",\"770\",\"600\",\"311\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmUg7NnhFNRFjXjkqLHioLAt60ZAF900e9cU1%2BB5MLG7zjb1kH3oVisRWPiRGOwnugmyXSqkO4W7BM5aFY1wUwLR15dZsvavAvO5YYdRN434Fe0wW55F6%2BmO63TPrIQ%2Fmniq1c1m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a807fe4e5696-OSL\r\ncontent-length: 235\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":589,"size_decoded":1218,"mime_type":"application/json","magic":"JSON text data","md5":"0972df7ad0c9e4b9b727225cad3c269d","sha1":"463bb224d11612728fa9e786bb6cd2a68cedcf8e","sha256":"183670f8d9e9aaef53d8f5633b3addf7f0e5eedfd6f158a3aae49be32dbf45fe","sha512":"301efa11eb82b4e65305a808db73a45ab47e56e20cf25f1c07804c25ccbcf12e5ddc1f7c820e19017c3153ecfaa59f34c184b4f320659f19d349abc771820721","ssdeep":"","tlshash":"1cf08256aa22a73fa18310d0dcb7ffcd5004e952952e8434fcbf19a2d3325142f9870c","first_seen":"2026-07-22T10:10:47.937201Z","last_seen":"2026-07-22T10:10:47.937201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:34.908Z","timestamp":1784715034908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJwLNecrfqwz3yyAD4td56TUklk1cSid%2F41v30dvE1X%2FGnH8clcoP%2B46UbCWBnKC%2F4ip1wr7sezuthhAcrms%2FK4iJ9Bvq1%2FoBQXGcRz7Bu4iSgwcyu6ZIntWdx0lwfZwCXWA9oO2\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a8082e4f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":1042,"mime_type":"application/json","magic":"JSON text data","md5":"84ee4484bb0ee681ea7d695d93342bb9","sha1":"3245e33fb5fd0864fdf5e58915b8964c72f92008","sha256":"c0d713a5b6e2207bb69fddcc599132c1091d7f217c8d73575628e0cb9141585e","sha512":"485b52460a691f7189281303fbf82faf52836791aafaf56ee69336102e065192b8d8cae8caf33d63704327ff6cc1338e475207a6d21467d313fcbd658ba5f9e4","ssdeep":"","tlshash":"d2b012ce804054475ab301005406b8d0a4100d5311e51d606bc0884544701430163d44","first_seen":"2026-07-22T10:10:47.938274Z","last_seen":"2026-07-22T10:10:47.938274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/rich-castle.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.586Z","timestamp":1784715013586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/rich-castle.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/rich-castle.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedy99pd4h8p\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVEmNl5FND5cpTpzdvWaH0S1yWfqMw2EP9WuYZil2kbFXmjG5N7OFODxyl0L4hze7X4TXyz%2BbrC1wmCD72QwtMn6AciopiXeAePUhLEsUzbtr2txZWyodcPaBQ%2FVutYM826B1LuF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8915696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22345,"size_decoded":23366,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7617efbce7c1a2085f82d74ed7bc053d","sha1":"8a87d9fd0df8e208ecda2b83ada3ef6bd09ff895","sha256":"013be604c6548754e28969d70478fab317fcb665756991654304d2fa40b44704","sha512":"a82d51bd48696452575d63390b6efd6abbdfce5f9b52c0c00be1fb01ffe3479ea7700362f3a94bdb2659d0ef96afceb8cdd8096f377926928284608bdcb9e35f","ssdeep":"384:huFY2JGCYeVlXIQ7HnTleP+k42HHis4Pi+LnHAgJZWlZA8mtFK+xBQY:h0YkYKlXIQrBC+x2HHis4Pi+LngeGAJh","tlshash":"57a2d067a9001a83d9b01db6bc4d661215904c9bf78e2fa0b97dfdc6d64c8c7284927e","first_seen":"2026-05-26T07:00:27.013911Z","last_seen":"2026-07-22T10:10:47.939533Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/blackjack-classic-22.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.596Z","timestamp":1784715013596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-22.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/blackjack-classic-22.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedr8u85cezz\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dp4uF6jASj%2Bt%2FKhCUD9u4p6cd2TIUmjaYiW2hTphfjwfAs%2Fp%2FhJJubuoOnlN0JnUj4ivEHeIgNvuNJI7L4kEmaBDupYx1UOM42Rrpf1gdry00wWVoTtk7xoLEn85hlqFjafskfch\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782f8995696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20473,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-23T01:03:05.57299Z","times_seen":52,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/star-orange.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.617Z","timestamp":1784715013617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/star-orange.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/star-orange.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwngawf-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ad0emerYgRNp%2BG3MY0dcTUsEhnpfudDDfLZHqk2dvhV0mO2%2FHN8UMtBwNdSQDZePV5a2H4w3ZimB5hv%2BRQY9%2FsKzq3tHQKhJr8TGwcEz1kVgy9VZg9trWT5T9FMavvlhN6rzjAzE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78318a85696-OSL\r\ncontent-length: 596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1167,"size_decoded":1626,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e058ccae66c074feb39aa15eb918ece3","sha1":"fe7e013d2a19720a882150548e452774cf7336cc","sha256":"7bcc44100e6d2d24d53400ca206faf196aa26f8d1cebd4d77e623fff2878dd09","sha512":"2f3e5b6b248ea0f5475a223e0367ba26ef5d94fe65f569167b7e02cc0cf170d6ae395c3d086d28e5e91faa91994a693ff98b8533483ffd2df2cabb82b1ffeb9f","ssdeep":"","tlshash":"ca2149e73298c34adb0adf50d9327614f20a75fa9acd434de1b057e142a91fa4d08dd7","first_seen":"2025-11-17T14:16:40.658326Z","last_seen":"2026-07-22T10:10:47.941336Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/5.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.658Z","timestamp":1784715013658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq76164-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmYxEwXqX%2FcqaoZYP0cnVRKgzAo1PSgRXyrz%2BI1FTMRf%2FeeZTkAlrrIM%2BEKLpzK%2FlPeM9%2FUwfhD06z%2B3UYeziYCf2%2FDNHBDjRoE5GXpe0SOaf3zWj02ANEtQgn9wBL64AQm0DIm8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358c15696-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1809,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-23T03:06:57.148565Z","times_seen":66,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/banner-rectangle-69c5656d53d403.16795828.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.146Z","timestamp":1784715014146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69c5656d53d403.16795828.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/banner-rectangle-69c5656d53d403.16795828.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcxh7h3r01s4csj\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8EYe8znkaVlerPNZ7HQ2ZQyoj3cyajx2Ot%2BFdBWN68KIfpSfT08D%2BtoN4dab3JsazNy4qZcPip7HAG9JOxfpEyqnd%2FrySZg0RDoNiCGcO8US%2BMkNrij%2BmyWdWYMdk%2FJNF3F8Hx6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a786690e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203203,"size_decoded":204284,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"7073e45095b906d5906e719503a07168","sha1":"38955be4a03e54bf049dcacfb20a9b72fa8348cd","sha256":"6540f62fd232e484141f92860854cc11c9287b8a61d8aca02a1e6d46e89edb9b","sha512":"3c1316d419ea19c32a925c6efe848c34d34aa4c961d6e9c2eef49e4beb68c3bb695798ee769c3cf56fbda6c3949d9a6bde9699036fdc3d3d458aa1a7fd86c8c8","ssdeep":"6144:SsgJ4GQPeL2sPXGVNbBRASDWr9fF4CFsQNzobQ:Ss3PexWVFBiqcr9dzobQ","tlshash":"f2142396d5901c977adddb664c8245db33ebce23cbb6cbd510f00d03e2a364a3926634","first_seen":"2026-07-22T10:05:30.524936Z","last_seen":"2026-07-22T10:10:47.94245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:22.831Z","timestamp":1784715022831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:23 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXOSDIA2ro0leLWd4B5rqi2Srz1E6Eq5uY32uUSVivhFHMqaK7RF43J92nczgCUe%2F9k%2BeOGdBkvH4YEP5y%2FA%2B%2Bnwo7%2FEpXS1SnqJ%2BGvN1VMB9kmjJTvWlUmKA%2Fq17qmshHR%2BDo2g\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7bcab735696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96,"size_decoded":1053,"mime_type":"application/json","magic":"JSON text data","md5":"0631018bc79021bcb821db34b4e80f16","sha1":"34fe0f5d73866bb99974520801e82186a6636863","sha256":"a6512456b0663b7ddd985f335d74db61071af98040282dcb7f1af889c9c80d84","sha512":"e2df352d2d0a75b41119b01e7311b6261ff47bcb0896db18275c1d01a98e8326efcf8b94e6d6ab519ad05798625ebad50ceafe994b0c9f445e97dca0c4bc001e","ssdeep":"","tlshash":"b7b0128544c33d0a82f3040094cb32d365120d035198d90013504cc24864481001bd04","first_seen":"2026-07-22T10:10:47.943071Z","last_seen":"2026-07-22T10:10:47.943071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/break-da-bank-again.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:27.145Z","timestamp":1784715027145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/break-da-bank-again.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/break-da-bank-again.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:27 GMT\r\netag: \"dhcvedru9syvro3\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUiFNc%2FOYO3ssU5TzwOSR8FuDJav4wCQcYYl3UKKlcPDX1LOBWI%2BnMPqmBfVldjf71QUuBV4ZvZqtoXTRmS7j2ulubPagjyPzQBdsdK%2FgKwQ8RSwMZtJ8jx3Tf0gBXdNU9juDBF4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7d7ac565696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35859,"size_decoded":36881,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"d80fe1f86cd827957174f961ae6815cc","sha1":"c626cf37ca1f8399df7d843caeb3c00338ef4281","sha256":"e4f2aa7a6ae12fff5a8e7923c389fce4c826a0f80336b21b753723f7e5df4251","sha512":"3f71f619039bb3672acbfc191e174ab845ce8155737482ce1274b6c8ca44d9cfd13efb422f7108b6e8b631fd7f4e2d5a40435cb1a5b745fdf15a47c509163aa6","ssdeep":"768:zXFir1roYeWx535x1H9dyK+e3QWdnEApiSUL4kPQeWth:LFiJVr337R7Q6noQDn","tlshash":"a7f2f2ff6be95918719f369eb0fc214cfca83ddb617b0216256747487b29390a3a0c48","first_seen":"2026-02-01T16:54:15.932721Z","last_seen":"2026-07-22T10:11:44.528293Z","times_seen":5,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/techno-tumble.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.303Z","timestamp":1784715035303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/techno-tumble.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/techno-tumble.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedyzgqt7fgx\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO2%2FYhcos8SSyrjSaun9i3INP%2FAcdaMFPzBJSHWS1uk1yEZBg%2B%2FVZwt6uTq%2FYjKZ5tK%2FqgQdXVJBaj%2B%2BNe1Cr8f%2Bsk7Rs32QTGDuqWavLSj%2FYx%2F5IIzfYUe8sypk0D%2FTNtlotzwT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80aae8a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20049,"size_decoded":21083,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ecc997c0287a171eee89da6877973537","sha1":"2431d9c91b8d49a13a23ed13799662e77d544972","sha256":"c031374d4172c57795aa640d3ccace7f53b7d840812ed8d47a7e187e38f8576c","sha512":"c1559ac6796be28ed32ca9b80071a4046ff12bf5de6a0f19253e94fcace14fe7ab0dc3b2322e8ea34ab7c8a034ff2e8fdc64ab6404a233261e33347d75644be9","ssdeep":"384:Ai17hyJyhMyZHNB9dN/jUu13SjmgxN60dbYt/rQuRtfcgGOJEy:/17h4XkNBpvgjmgxjb8UqcdOJEy","tlshash":"ae92d13d9950562af41e6434b7c7e595aba4292e7128f870b2f33ce6235c8cc8350f67","first_seen":"2025-12-01T07:25:15.295655Z","last_seen":"2026-07-22T10:10:47.944916Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/apple-touch-icon.png","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.274Z","timestamp":1784715014274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=napuoFk9h2BV53Vz8sQaBHDt0dntPyWiaqesDz4ZmqyHFBx8J7CGcOAHHA8cEpxCk86r3uz91r694lcbapnZgXm8KmqYOfyESKwM9Xh1UNm6JtPYiFsptpozN%2BtqykqNx3MN4zbS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78739165696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29902,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-23T03:06:57.231888Z","times_seen":23,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/majestic-sea.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.307Z","timestamp":1784715021307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/majestic-sea.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/majestic-sea.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedxeb7agjwd\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUTpLA53DoBSLbcdYUHSDbwI5Yjl%2Bw0gQ33WAlfwPIzSrMLcbebgohUqnshelC3Yk1d0KqajVDlxDA7SmB%2FxUtu0uBcjEC3i5l669jDU4VIbWxCY%2BTlzktYARiLrPdlb2dsYvUom\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b32b095696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25789,"size_decoded":26804,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"efe2b5237e259f1aaa05af5a45759dd9","sha1":"986ec1626e274b10c28687bf51b59e5cc17bb4f9","sha256":"2059609b60cc6698a224693c6dc8404bce999523f2e82c2f0aaea1f9352e5ca1","sha512":"4097cd146e20f4661cc7919c6801f10db2471be1ceaab1e7becb6b705cdf7646f502e76fa7649dedfae495a47b8913d8df49a78f165b9378cb343e19edbd1fb1","ssdeep":"768:J4405PqxbauKwYSeeFVSuW3spMhHb6kF4taHIeU3v:J448WWu4M0spMduklIRv","tlshash":"e2c2e11f6666a824c21f2d678c4b19b7c6498b5a1c762b539814c1aa4b1cce33e35f9c","first_seen":"2026-05-14T22:58:26.788651Z","last_seen":"2026-07-22T22:37:23.704105Z","times_seen":6,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/tetri-mania-deluxe.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:24.149Z","timestamp":1784715024149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/tetri-mania-deluxe.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/tetri-mania-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:24 GMT\r\netag: \"dhcvedyzgqt7mcz\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtjT3e9zLd%2Br5cYaBug2PKLfjTNYL13BvAyIRyMIMwU95nw%2B4aT%2BeBDWBWi%2BFsOXuR1e%2BWc9cASZjp6xLT6cb80RbhV0SOcQYPmKBxxECb9NnA9Z%2FcTcTse%2Fny4TtQ41WaYVTeAY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7c4ebcc5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28979,"size_decoded":30008,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bf2367ccda9ef2299b61d9c26925adea","sha1":"94d3ddad6fd5aca9f97994bf722b011c3c93473b","sha256":"da2ee62338e4f19381ac6304a4dfa4e53effefa45865a8781ab843637a80d13a","sha512":"e7a43eaea640f931119c4c6a59f00ae78326921b3998a2f16c49bedaa98932198e981f99a207d18c531a60be673d62fba337c1564b38a2d44b168c555dd5a3cc","ssdeep":"768:X5Bmuw4DZQPy8ZOPvAEoFGEcm7zzwPF4P+4b1:JBmJoU1Zw2gvxPFSd","tlshash":"81d2e182138e055ca7ce793e9b140d31e359a920d5426f1f2d2a75fd23a00cf6ef2e55","first_seen":"2026-07-22T10:10:47.947506Z","last_seen":"2026-07-22T10:10:47.947506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/what-a-hoot.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.293Z","timestamp":1784715028293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/what-a-hoot.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/what-a-hoot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedziilbggvm\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9mEpU285pDOkznER56oZhFJwG13L5cqczsGIkWvbXFnumTXobGQgxgBCejQGWVhnI%2FNqt5VGkmJqDqdw15%2BOQdKN%2B9UwN2afInalqPF4i7qTiAgvYA6n77RiDqkcHSPusH7hK2f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7deccce5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21874,"size_decoded":22888,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"74d28e3d2c0978b7451ae6baf6c3e533","sha1":"45f9cd10b420fc3ae576fb5ddd0223fa6eff109a","sha256":"aad80d4cf06046a8224dc1252ab417506072ba04f24b0bdce3c42eb137925e15","sha512":"3216015f698816a56b7b7b901f3a91e6a8aa9dec9f224fe66e6cd48f7e34d37ce95ae32ed85bd3e919d5bfc5fc32b3a2364f8f47732a946c9caad696f1c31332","ssdeep":"384:YiQr6hU7Apxi+t6GtDjleEU/3m/apMXM2dJn3jqC/121lIecALx2xz65v:3hHE+/NoB3mEtQ3j9/8DcAoxO5v","tlshash":"6aa2e10cf7f5be45e19cee3295385917edd921063924d4551081be18ff9f982a945f0c","first_seen":"2026-06-02T00:44:56.510077Z","last_seen":"2026-07-22T10:10:47.948384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/mount-mazuma.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:30.152Z","timestamp":1784715030152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/mount-mazuma.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/mount-mazuma.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:30 GMT\r\netag: \"dhcvedxlge8bphr\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bggu3gXKsIW9Q7p9Xdr5qQhuKBrdwyUtBYj8Rp38m7uiHyjKjZB%2By6HkAR0vmFThCKdZNCBfhF0w9SIuR%2BnJ%2F5IixSABFfKdQFC202fD9b0TsgEBWscAMygem59f4A7vH%2BaKdZsz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7ea6d3c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33039,"size_decoded":34056,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"cc08d1977ff8636f4a73b6e1a728fbf0","sha1":"6da0db6c7ea63f7a174305c1cf94482af1493899","sha256":"6046206c1945a20e4bdb41a09c94e18fa4f3b4e4466fd1ad8f8ad492c4724305","sha512":"11ce6706f6a823aed4982dc36d05cfea97253dd0888574d7206b31666844a680dba9c795d181dc9751a2fd658e1eaf4d6b816d72cf45d2bed84b5455e7156006","ssdeep":"768:BuultLKJPW24YLm/gwXeXv+g25RwIW0yPymI+oA:1tOJexYa/gwXjg2dW0yPymzl","tlshash":"dae2f19d60a94785dd2e973e77319789a213bdc9ff24760808e1ac25138ca4af30f328","first_seen":"2026-03-16T14:22:50.832159Z","last_seen":"2026-07-22T10:10:47.949767Z","times_seen":3,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/agent-jane-blonde-returns.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.319Z","timestamp":1784715035319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/agent-jane-blonde-returns.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/agent-jane-blonde-returns.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedq6qj4unqp\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F85p7aLx42GF74XZXH%2Fd5E5tn1XtNzbzZXZXS3IMbc5voZvBxlQJI8%2BhnKrH2OXmsGGvoQ%2BWIKRnv3c0fiZuNoJtOH8U%2FjJtuEBrhQXDbM%2BBFTDmx438cb5t7OqvzwTn9wJpMkNy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80abe925696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30769,"size_decoded":31803,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"47243e1819e1d3f8d4bcd6ed68df15b7","sha1":"90da846d0bd4cd5b9cbb1d67639fedf72a5904f1","sha256":"9199c41819c0c968dadd714466cff36f5624171b9f8ee2a34ba1d8bd73702b37","sha512":"2314fcb9ddd0e1a30a4c0577b93fdec359811b02f86222dea2a4a9b6d64bdd98242d84b4486adf2046d77adcd51e9a7e0b3fa9d1a6baead3894227f7f9da2dc3","ssdeep":"768:yb52vE3/QKLaWO8L4VXoniM+4+czWD7AmeQ:yb52vE3/5abWgXwNdNLmeQ","tlshash":"ebd2f1291012a8b9ddbc3bac4b1ba375555b8e12f403130f4ad4751c1bfaadf192b279","first_seen":"2025-11-17T14:13:19.369052Z","last_seen":"2026-07-22T10:10:47.950356Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-16.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.653Z","timestamp":1784715013653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7618e-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pl8n%2BTKCMKGhddXiE8fts%2BlmHDq2t%2BW0Wa5bQPHBXtbKNFDhpClACsqg%2BBjChz1%2FHU78h6HqhGZQ%2FnN9Xs7nbpDbV%2FZmZcxZ9QoIFphsmwgEe3SUj1ZMgE99UVnIyPrCcDr23IcI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348be5696-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":1794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-23T03:06:57.000239Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/18.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.670Z","timestamp":1784715013670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver8iwavf2u3-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCVyCwDk5BNcgpzl%2FqILSHrPQonCSn%2BaN0S3Sm3I993diJgpG6eQdba2Z3HWht5bsgVOjsS%2BcBqZGigMu1lAXSySIlx5TUhYF5UG%2BXJwb7O5tDYSDLoLt9LxWQKO%2FPBSPI7pvku0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78368c85696-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3675,"size_decoded":2250,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-23T03:06:57.032638Z","times_seen":84,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/images/search.5e828e81.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.149Z","timestamp":1784715014149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcvh4dlqphbhf-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcuB8UXd%2B79mwoqOpPWKq1Ng80jyOdSkM6zaN30S60VIulK%2BGvjFsbL0PFLju%2FIPSkgmpyQlV2Mqa5hVH8PII6yPTYXGTY5Lfmwp7pchXBYBXIMW8ex9%2F5Pe50rikQEdSqW3FXuo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f1a78669105696-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1348,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-23T03:06:57.239828Z","times_seen":106,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.150Z","timestamp":1784715014150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcvh4dlqphbeb-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05H%2FZlD%2BlAstGw%2F2l2hZv%2F%2FN9ACmtN6H78RkcHF4j2%2BhBRsE1%2B%2Frwk5sWf9Dgez8aJe3%2B8t%2BlxdewjtsY2Qz4qHslj%2FhjyGQ5%2B3Wzv0wP4VWhBLiO3rUZlNmyLAQuwmh%2FmPCQPS%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f1a78669115696-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1319,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-23T03:06:57.003198Z","times_seen":79,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/9-lions.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.273Z","timestamp":1784715028273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/9-lions.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/9-lions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedq1z2iaqjs\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17iAsaIdBBOLkPwuAEMVNZ86dwL8cVLLHxtLg4xJQuMWPlqfqhOnHSyAeZuJYzlEE1EqHTvr1WJudsCe2LQ1rbwPYAcB3mOlqXc3Nphcy1VItLN6oz7rLRdegRTKJF3Xwfoi6HTa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7debcc85696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34408,"size_decoded":35412,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c8a4f0cb1cc845e38f966db0b63bb7e5","sha1":"192caf73c4668a72c02aecd6f2235532c4cd9a76","sha256":"70f8ef448c399c4dcffd5c2f5a94c764050c4d7cba83439258990d9a88974639","sha512":"fe8d9e487c79d88e8054ee440d271c333f15f73f596b842f08e672bad7d4244fdd6f84e02d1fc5b298cf6a018d1e3d8e29b9fd9db2357ca3ed3bc85c13911de5","ssdeep":"768:7s+l0NNdAhoJWNMlVdwEF23w29SRH+yuu1PiHniLG8vYJ:7syOAhoQNMlbf23HsXMniC","tlshash":"f9f2f07e371b20629d58d3ec5cb383a332324c922f51658216797a253fb8b0365da5bb","first_seen":"2025-11-17T13:48:13.610625Z","last_seen":"2026-07-22T10:10:47.953205Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/thrones-of-persia.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.304Z","timestamp":1784715028304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/thrones-of-persia.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/thrones-of-persia.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedz6lxr1nn5\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ocx1gsTGkRg%2BLEaAFyY3u4DBIZASAC04x7pcMokE1sW3LqkKd7xKZeejcOxdEDMPP6ajzFvItdo%2FzDCefy01hgszmSviZcJ3DKCEU25o6D5UVFQe9AUu108zBIS%2FZjTUoT36YZ%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7deecd35696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30641,"size_decoded":31663,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"06d446ad46216c0085e253cec9ac5d6a","sha1":"e9cf24906eb9784225d769431832256be2294eb5","sha256":"6293fb7281e1454667ad2dd10e4c69d79fa2e6be76faef6bc2f975f12bcbe185","sha512":"241bd4001fb90162328fabcd5201848176410db693d80c4cc03efc1eaa1f22463acc37e98ebad115f0ec31e0c272724945e83905ab619bd3f08e6e1f3680b626","ssdeep":"768:NtzJ364WgmVtWwv617sa2fahHwogIE2lCl076z95qXMQXG2pY:Xl36eChwCyhQX2wl076z95MMQXG2y","tlshash":"d7d2d0772d115ed28a4fbdec4bc3e7e2650060d3a8df24821de136bc83655da2c8db5a","first_seen":"2025-12-16T07:17:55.555271Z","last_seen":"2026-07-23T01:00:06.73073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/fox.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.608Z","timestamp":1784715013608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/fox.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/fox.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvednlv0ww29a\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSwRU6QcShViij6fX2lcwU1NGuqPZlxTVV5dyskMcrhVnUx%2Bn9R%2BNo9VLgQVZJ1TSGo5tAiZFcKrn%2BOYbFwfvmd6bF2Qf%2FapbtbwXGQjhHMVLpzTMne6Yx97HUNa7cbKCCSA%2BOH%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78308a35696-OSL\r\ncontent-length: 2803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2926,"size_decoded":3845,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f28085cb570e6720363457fcf0afb186","sha1":"cf5ef35bb9aa72eddc5b2068bb12456f89b55898","sha256":"b6e27d6b6ee54a514c70e38bd7559f79fccd9953c3f4dde42fe966f3fd70367f","sha512":"6f00b57a5fd7016aeb45dddca4e8d2e44c5760aa38434711f0c92e5f67aeb5733b8dd81c1cd7697984c436a50b755318e7ff91fe97d02c1064e7efc89b8f22b7","ssdeep":"","tlshash":"9351f7a817b58813ee7c2636991b0a658b94784c0680cb212167db21a33439d6d245fb","first_seen":"2025-12-06T17:29:39.399713Z","last_seen":"2026-07-22T10:10:47.954382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/payment.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.620Z","timestamp":1784715013620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/payment.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/payment.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwnga1t3-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wieQrhqs0S1vnb1c3JROYbMsjzRMNWtpM7Qfh4mPhbEntfiXPsIt7xRNkXGkJVkQ%2FheOab%2BAqqeIIyYk6fEeKqTJuNb8%2Beenn6yvUcb8OFswvKlBvTcUo3Ov35isJFEZXAeiu7A%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78318aa5696-OSL\r\ncontent-length: 1025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2343,"size_decoded":2053,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f186d2a7c5d8ad562f2ed1b5a4f42cee","sha1":"6a87329d1f09cbd709d98439638420c88d5d7805","sha256":"710cc84e7eb69e5aee1afaf598ce3bacf67d8b44037009c00278b6e0aa2474ab","sha512":"36aa3e4901ed4aa1b507bc55b36663f8c5719e94cc5f639f9234131370d13b66eab0449642f733ad59f5015c18bc81aa457d9a050dc86d8598cf47a468fd6902","ssdeep":"","tlshash":"4b4153ef63d832d0d20ae355dc2524b6369f3cba7f94cb589240df6152662680b2c894","first_seen":"2025-11-17T14:16:40.551826Z","last_seen":"2026-07-22T10:10:47.954957Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/banner-square-69c5656d5c7144.95676786.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.142Z","timestamp":1784715014142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69c5656d5c7144.95676786.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/banner-square-69c5656d5c7144.95676786.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcxh7h3r01s2a9k\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeM%2Bod1DtbBJLTbJpu7tBPzrRlhu0RDCKdP7nHgLvXFwMsB6ohfX4mr%2Fu3Og4Ap7%2BegtxlIySvL0XFv48xDdiUyjqtubrFOE3APKNeLtdbZ5jSghxZ2KCVvoXXuxBbIsUJD%2FhdY5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a786690c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106616,"size_decoded":107675,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"b4d85e31b5e75223eefa01e7d39354ca","sha1":"31c4a2a5eecc2c48613c32b1e0b969926e49d871","sha256":"a58375eaaf582c166f92c6828a45cf5544dc6a47de0db3d7cb1bb73229a01aea","sha512":"de7f60edfb42913950a41f5ca3c83bb1e08997caa0b769675c5f078509e54117d37b681a626081b7ebd447777eca6e21626c7216ec42fc4b13ab3ffd592fb93e","ssdeep":"1536:vk9Uo73kh9+p3BRdwymxhPXD13mZo4X9hKsyyxVMJEvCCPdaT/EuuRqCkmutEWwB:gn7ZPOd7PTghiyx4md7qCklMCEb0ar/","tlshash":"e9a312e0065dba187e4fe5efd33e2e786990434a60c96e6cc6143161f4e95bd2c08fad","first_seen":"2026-07-22T10:05:30.661696Z","last_seen":"2026-07-22T10:10:47.955524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/fire-joker.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.292Z","timestamp":1784715021292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/fire-joker.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/fire-joker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcveduvtfdsmkc\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EPmi6%2Fiwdcy109Ame0vuJxtkE9PLSsFt81TFsOuuhAYIC%2BzJvPOY2s5QrU7BeKK2rKpntOX8NkGPPpROwRLEcnSRDIeVF2xjzOLIlm8AhK0pEZV%2B5oCVaYDMKvtqcVVYr%2Brwz6E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b30aff5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29244,"size_decoded":30259,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"68db784ec01bdb98fb014f116da94b67","sha1":"7e54b36d79ea8ddad1be3955ad917b95d1458ef3","sha256":"7f65ed52b30ef5ba519d7f9d40f3d785185497ef9ec77c87cc8fb64331da0bd6","sha512":"19a26d0f246ce1e17449bd0a80ae41365c0bdff83422d4b977cea0cf35b639d35439dd41af21cd6a8b48737f3d9b5a816f5b32a6892a59b276cd5342a7c1e94c","ssdeep":"768:ziwMn0JhsfHOHcyNnQzA5C0dxQ+ZCe23xR48jp6FE/N:ziNZ2HvNiAM0bCbhR4LFiN","tlshash":"71d2e1570a784f84ee5f011d5190c236d99b4f828cea039f6263b7de07e0f667b42893","first_seen":"2026-04-10T10:02:45.703842Z","last_seen":"2026-07-22T10:10:47.956401Z","times_seen":3,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/gods-of-slots.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.286Z","timestamp":1784715035286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/gods-of-slots.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/gods-of-slots.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedvm0gtvi5e\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gTZSFnj08%2FfRm37fhtl57Xb4h8M9ZLjqc3FLpMn5CmYzKzkC%2FC2T%2Bvfo%2FqR3HGl%2BgOFnn%2BOqlJEkEOAWVeiUB7F46QdQXjkVfjj3%2BPXkOKSaC0P18g1UsGQPqb2fKszsQLj7ujH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80a8e865696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23522,"size_decoded":24546,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"5058b9f09db5944263c73f5c95c70c0d","sha1":"6dfc4e730948c4e739f134299bea395fd0c6254c","sha256":"745a29de594db6bbcc1c8e5076dfda8abbfb8e602d8b51b464d07aea5b553952","sha512":"dafa2d34a429f0333351dd1a70e652e051741236f3d00dd58e3cdb2be4caee1ef4193d53b4884142836d72d4bc9cdab356bc6384220baa667d23fefb5e23a783","ssdeep":"384:Ix9xQ5meT/HboY0EUoSFCpRmHebjfRpfoe+Pr/cpxUeVW0xzfBoRFx87:gvQ1TfboYfUoSkpAH4jZpgRPyVjsa","tlshash":"5eb2d115b8b83ec1c52d0bb340255a3d5f6af64096e5ef0990e0ffa407e25ed9e98235","first_seen":"2025-12-25T23:59:48.624802Z","last_seen":"2026-07-22T10:10:47.956993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/african-spirit.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.290Z","timestamp":1784715035290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/african-spirit.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/african-spirit.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedq6qj4uoya\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNG67CK9Bh3q6OjJyVT5UGsuThRftPyzQuEgy81MoIFPJLOpGnqNojyAFCqClw%2F0LOp1DLPHYN5McfkkOUs8w%2FH1e9ygHs6hZG%2FTwrnfa4c6N7vDsXARCTCIe7w3mOYxJiS5ZjnQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80a8e875696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32338,"size_decoded":33355,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f4de875d2c6a8216b64f1f6b5c84e8b2","sha1":"e83367f22e41237fb675226d9e464811d89a0bb9","sha256":"b7b7416ef578a136f4fd26829b8962c18464909241772bc6e5190558d8b9f825","sha512":"7e74cce1f36f79fdf45c00b3ddb3738f4cab07a1f7f8e792a0bbccf6906b70c848732f581bc6c65ada5715e419d4cf721608500899cbca59dd88f9b036718b4e","ssdeep":"768:J1H7BU08DZzjPM+ou+AiNn6lXW9MqXLNfciLXWj:JT+ZzzM+o7TuG9BXHXC","tlshash":"72e2e14cc0120d77f4ed3763d6e63a46a217cb37b896d809748bb3389f15a617ca901b","first_seen":"2026-07-08T11:59:44.376114Z","last_seen":"2026-07-22T10:10:47.957639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/duck-shooter.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.313Z","timestamp":1784715035313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/duck-shooter.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/duck-shooter.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedu5mdxpp12\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ds3CFG%2FPx4wsN3npThl0XCinrA2fj3u2MYYe7N4RdcmRy1c8Dw52utg34zYC0%2F8LgLqbNoMOdAohE8mu%2FoplyQk37VXc%2FBusmShgIV7GhzVkYq07Djd4uAsOM259denGTsiWI4T7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80aae8e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32438,"size_decoded":33455,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"fb7e50b301c0eb19665dbe8056cf6006","sha1":"2b006ee809a3b6524d0d882a6175c293ff488a7f","sha256":"04aa0c9dc1e74b4aa1920c18d010f24192b5d001766cc471338c2048dcaddf99","sha512":"48e32aec59d95a0443baa99d31f8f26c68fb07d575ef0df26dcb7c8d8ef7e7b792431c178cca50df26d95d8f7414111eb63e8d840e6446082ef4b3cdef5bc908","ssdeep":"768:GxVeYCkLQHpco+ZZB60JSrSc8HlStoJaKwnVkCvcRw77:GLtrLQHpco+zBbQXASKazxZ","tlshash":"03e2f16d32f9d805c99d4b48b6ed9bd0d546223402be736a9f38372b6b3f0142025bdb","first_seen":"2026-01-01T08:17:55.555717Z","last_seen":"2026-07-22T10:10:47.958195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/runtime.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.553Z","timestamp":1784715013553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvh4dqi63v1jl-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjVDiegM6TsH8bIVSDhkkm%2Brnp%2F6KNdiYSwOjZWi8yzheVIro28PtQjfpppBQ%2BoqT0RgQIGmqEkVUs%2BTEO%2B3BXKZuCIG8JPHa4p8vRQMDe6FPouoIqmqQN5bzPRPoQ1uuVoubVuV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a782a8815696-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2001,"size_decoded":2076,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-23T03:06:57.133867Z","times_seen":128,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/next-arrow.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.572Z","timestamp":1784715013572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wF1dft%2BXI5W1psY9exxC2eQuO7i7Su2BSulxUlabca%2BG4kXjX88rIDuZJUjnCDPs3RljoMci7sOTlBNoQ52%2BTPIu22g5kLixwmMGC8reulBCVMVesqnD5TxVSCscSSvjE5dZaQqj\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcver9wwnga6t\"\r\ncf-ray: a1f1a782c8895696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":1170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-23T03:06:57.019279Z","times_seen":96,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/1.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.656Z","timestamp":1784715013656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvw1be-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxaTq8V9WxEo392LtoPRvR9GYMUx%2F%2BA5BK7BYa5h%2FG1bRcIHm%2Bx8VGXank0yGEXDVJXh0R5YfBdx%2BVLwhgU4wHqgeElG%2FD5YoggU2seA5ZroLRssMeWyg6bjqSC8RLf%2FF1Sr5zY%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358c05696-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1747,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-23T03:06:57.260951Z","times_seen":90,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/jelly-boom.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.285Z","timestamp":1784715028285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/jelly-boom.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/jelly-boom.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedwo45udiaq\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcINiQ0Fmn61iJbvivQQGgwUZq9i5OmCwsAXgSd%2Fkx7dn2wsBKEeXgxljOD3mDnGyb1x2FYn0Mf%2BkA%2FdVcMhMzlGFch7iD3PqWQdg9U6TRV2QYMzwHGULSIjJzbyhMeq0lgyJGLT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7decccc5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23714,"size_decoded":24727,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9369c026202647e48562c11a8cc7d67c","sha1":"162f6678ed37ce0693a106d7cc3691309908470d","sha256":"54df9a9f74d138df4b7fe1952ffb86d1e3e1f7aadb1abb1f4fa73eb5c7c17804","sha512":"37906f28f94949193243fe265f818dd0383483d7a2bf70a7463cea27bde1fe1057a281b6df90fa754e72cad56daef37b03eee2397bcff97bce9f2cff7d96d08f","ssdeep":"384:7SRBeAS5UkQSBU4xrfOzln1nFM2e8IYxv5NhwzVdvseKLXXI7d8mhs1YYCwX5j8n:sYAXD+U9U8IYxzhwzXkXXXIR8Qs1ZCUI","tlshash":"91b2e1d197cab353a1ec08348b78076f1d00d31415a39b61185719eb1ffacdb95399e5","first_seen":"2025-11-17T14:10:19.087929Z","last_seen":"2026-07-22T10:10:47.960953Z","times_seen":5,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/blazing-777.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.299Z","timestamp":1784715028299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/blazing-777.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/blazing-777.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedrfzf36e2k\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaZ1aQF49CraOKa00zvirhjHNGc6HAGDZpizftSCXS2U4nuJMDoUChWlxHbXbDvCCEtqVSXrC2YgHh7HQyFaMJZmLx8lmxlKbaQH9JZEAKW%2Ba2zL5E0zZfKns6bALBdN4X%2BFrC46\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7dedcd15696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18236,"size_decoded":19248,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"29f48287b6cd35418463be08bb78cb40","sha1":"cb202716509a5e858f95e2429996ae75ffd2feef","sha256":"41afef758f9a7b47806d03e7424e34b756bdcde757a5fa5e3258fb84eff92201","sha512":"dd37437858bcd33b3e7f5296130e45022d1009f3f0963199c646b78d689df756265dec06f53dd0db01e6cf4fb29ef71b81f0b0c57d63bfac0607c1d2eb45e9e7","ssdeep":"384:fdy2nSZSVSYbZ//n0BbJXJtX1fD2RsNpBRDQq7g2jGvg:Vy2no00JtX1fD2Cgq7gBg","tlshash":"1082cf70e3c87804fe4f9d34967c67624579153cd7686dbeb3a22ea81b2d11a0d820ee","first_seen":"2026-03-21T02:18:55.659129Z","last_seen":"2026-07-22T22:37:23.680648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:31.907Z","timestamp":1784715031907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:32 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iG1KAM0ps3pRMcxBwUtMsd4Dv374OLbNMhSAhJ7DT2gb2U%2FQpxFnLQlGOKvhj2vqSTHuwSlK7tsVtuukd97NB3m4dlPP9%2BwypeYsbwV7aiHvvFzaa%2FjYOkIibc0DgPqGOuU0g%2BzP\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7f56da75696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96,"size_decoded":1043,"mime_type":"application/json","magic":"JSON text data","md5":"72a37d562ca5b2d91002419895c15934","sha1":"239e07dc0c610aa54757c6f9b379ba0ecf35a954","sha256":"63493ca74ca48812e7a24adab6104335247f34cd95cbefeee4a532b4c9fd7125","sha512":"2d5bef0bd48a18f901a041ef205b194a7e10ee219d9dd1e6cff1906a732b1f8c89666a26f83c1bf3723bbc48c520afad372e4e0b4c6dbf9dcba79924a863a8f3","ssdeep":"","tlshash":"3eb012eb588009b962bb05052c47318054200b0304615c9296808880c5d4d49c013c50","first_seen":"2026-07-22T10:10:47.963169Z","last_seen":"2026-07-22T10:10:47.963169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/images/bg1.71f9ad56.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.891Z","timestamp":1784715013891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/images/bg1.71f9ad56.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/images/bg1.71f9ad56.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvh4dlqphb71ns\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4U%2BhgdpFu1tGFBCEop1oZISKNDlny02ZI5npHTY1Dq1N75a8VlYmOgnLimyPebdP18YybL68P%2FGCKDaSq5WBJRl6NppFRD72ASRXNDnCHyghR98opbpLlxv6DZSwgvmUwx0f1Zq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a784c8d65696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328744,"size_decoded":253213,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 2480x904, components 3","md5":"594334bc1e2981b09002ae1cb8eb013b","sha1":"e52a37c73abd80652b525ef3f91a0d2ee30f650a","sha256":"9529b1e09e85360421e87914b1e3eca49ebe44a119179f7c457fee66b0b6b280","sha512":"d0452a969ea133054f5f9014744931bb6ed97512845a3fcdaf21e93ee1ba9cc30b55682fcb2dcf5d617a80da82c582d5dd0bcfdfcefb29004b59417d71fb302a","ssdeep":"6144:u90ov0+V0Kt18VAPZddAbgSOAT3n48unRuAi:u9RvDt18VAxddIgSO23HU8b","tlshash":"6464d0a4ff9067414d5ebbb2e689b9168d1a0bcc59e98dcce4828c3df5e03c1cb27654","first_seen":"2025-09-23T10:56:20.412378Z","last_seen":"2026-07-22T10:11:44.594596Z","times_seen":20,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:19.824Z","timestamp":1784715019824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDlvvVXCWRPO0NPT8%2FVn5sQ6mWhslapZcnahO4iJ%2FyRuv3KaBCXTu4YLId1R%2FwwPalX3DnxnJjznbC7CFlqSlPFU32bspS9AowYd1CPeaOKe35dcXIs4TolFfJF%2FqDnOpfGGIH3l\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcvh4dlqphb5z\"\r\ncf-ray: a1f1a7a9ea795696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1185,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-23T03:06:56.981891Z","times_seen":129,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/vikings-go-to-hell.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.580Z","timestamp":1784715013580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/vikings-go-to-hell.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/vikings-go-to-hell.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedzg4v05mab\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li9wyEJEQswHygUnfQ8kzxPS%2BhVAc8EuYG%2FUPL%2B0Ufzx7joBLT2HE2Yg%2BrG6%2BFgcHkOh92bW2FlgTdpnLr2DmBYirua%2BDXigcWqJfo%2FgLv78yb4TpyhwY9hHih8CXYPAOjSZqtW2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e88e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28883,"size_decoded":29921,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"dc5866539516e5833aedba566ca0a234","sha1":"6449a980dbf84fd516a1749549757bcb9c0f1e8f","sha256":"b20e6c1b9b1f07b68c0c7621d7fa6c414cf90b6b00ed550f301c16c31d5b3dc3","sha512":"f3cdc308cc3cded311c8b8742923b2d881c660a490749cd3da81894e1752bf6f4fca46698e608dbe91b337fc367dc3140c20fb834374941ac0263f7abe35d024","ssdeep":"768:V0PdTvqQAsRlvdczg/WYKgG/b2xPfaBMAHm5aqdkwyn20j:VovqQAsReg/OiPaDl3","tlshash":"3dd2f15d8348f9671f2a77b6122b0f8d93f3569da401b1abde9d219c1f29c510bfc091","first_seen":"2026-07-12T15:18:43.856687Z","last_seen":"2026-07-22T10:10:47.965017Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-3.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.630Z","timestamp":1784715013630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7611j-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wb9FEzVMfA2W7i6RWvldzUtE%2BFj1daIZFpcoJe%2B76l%2ByyO%2B%2BDlPNsKMymeLcQBSKcKEDK7fyS60RRDMPERku8rxEFvqjwrJiSs71qzwJUSVDpiU4Lke84fKDxHN9CGO27bOvhuv6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328b15696-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":1734,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-23T03:06:57.106767Z","times_seen":73,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/18plus_icon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.664Z","timestamp":1784715013664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/18plus_icon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/18plus_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver8usyft1ar-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ew3WPGhC791o5dVTmhm87sKecP8WzWmyfGxkfXlzE5iYTjTxMKabK99rW2MOHNJwYlr%2FAb8ywxTVfbhOePpSodJd2uiQ1w1kTURNYWuTugGYIlgT8KCY3fHJZWaiVLwLhNb9iCz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78368c55696-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":1707,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0f9c719dd4e1c3f2c9f15960daf78f3","sha1":"01729b3afd78d2cc88d50ab64459d0238cae0b0e","sha256":"eb4781501da6404c234bce791187043ffd8b76ff71ed4c47bc642bf6983b9b8c","sha512":"b46d36977240a08da3731fdf869363ba9ee385d0a546a716803a98675d8e3cb825b8a42f070a1a0748d87c08dd526597805802253639a509e98eff6b5b1e2e7f","ssdeep":"","tlshash":"d331ccb7abc872e4d64557e6a07a7518f67530fbbb5acf05818826647a0117fc1ccc44","first_seen":"2025-09-23T10:56:20.497394Z","last_seen":"2026-07-22T10:36:34.567629Z","times_seen":60,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/chimney-sweep.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.159Z","timestamp":1784715021159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/chimney-sweep.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/chimney-sweep.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedstzro2lvs\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxPIcYnxl5XldvbljDyfpXhAUPjgutBD%2BDKVWsDNzs2SvX89J3Vg6sA7jnChzOqSMCojk%2FVmP3%2BVoYpiwy2No7RkNMTdFURfd2F0y0u%2BFXbVQA3c3qFopfB1xRwiczrS%2BDGLUVby\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b23af75696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28360,"size_decoded":29380,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"729e5a05cd7fc00f4d3f1c49108e13ba","sha1":"9f00e34bedd42ab685fe227523836460c99002b7","sha256":"8a8f84ea4f6414ef5b0295a95a9a8164718fdeb8d491a849b379e553b30f8c3c","sha512":"b540900c9f92985da3cc8c5b459b8fb5d08f6b56f8dfc0dc29160b8fb5ab7975208d08d7ccc9315313c17cf63edeff486fceb2e96ee79c35af462ef8e05ca53c","ssdeep":"768:FFXRtuqoFV9p6uCCd84eQSenki38C4msXauIyVKuij:FTt5oFBCCKbQDnku8C4h2yVKuq","tlshash":"b5d2f18d3f0fe906ea6d0633864e37b3df458a164a9850c82247277d96385fcdf67142","first_seen":"2026-07-19T02:34:36.25445Z","last_seen":"2026-07-22T10:10:47.966866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/emerald-isle.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.306Z","timestamp":1784715028306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/emerald-isle.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/emerald-isle.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcveducrkvkm77\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrMvPw2IARVtnjJIJJ8n1XfbLg5dKRvFXdu81F74uvQfXI%2BpJWHUPSuIUHb5V7f8N3QYrncOYtWzFAlJXtIMvYam8nX6r8zDfa12iYUEptEe1YF9YYyPqGo4g9qo%2BnNBvtc%2Bs5IO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7deecd45696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28771,"size_decoded":29786,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cbebdccbbd896733ce7c86772c5fc95b","sha1":"99128968b7dd9e75d646644d1b3b80b16c683cfe","sha256":"76dd3582f119b9e1d266ab2ecd6dc1a1b2b5675502bdee790cce1d59fca5d5eb","sha512":"23979183098a56c726faeb2e64e14387a4d29a8d21c213ae580f6ac8860ad566590e695b73d8a59efb36b6825ab53e3f6dd9106a4500521273c84c5d58d7b335","ssdeep":"768:aCr7lS6Rl2vBkpU0ETRAsWWdQU3sN7gRZt4bUlo4DM+ue:aCnlS6r2vB0wTrDgWxwUlo4DMNe","tlshash":"03d2e14fee05c99fb2ad41d8528577f28a06ab3650078fee5cc32daa6753820d9ac700","first_seen":"2026-07-12T15:18:43.893965Z","last_seen":"2026-07-22T10:10:47.967838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/savanna-moon.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.316Z","timestamp":1784715035316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/savanna-moon.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/savanna-moon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedygewaynpz\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWIf4ipD9KSlRXBJhTes6KrjkruLhF3YyBD44u7xA7N%2BwcQPttMSlwutzbVKVyTi%2BZgrzwuM1ha4AW1AAw40NpQ34EVn9vYOADT4uVMZFAhD66cy%2BJejL4ycNd3VGBPpkWa5oMCh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80abe915696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30743,"size_decoded":31758,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ce9b5a089a443bc19bf40d833a1a2b23","sha1":"1a9413ef23fbc56b518a14dfcbb930918ad7b8e1","sha256":"8543e048f0e9070021ec810e72df62e36c201d61ab8d2426966d9c448aa4bcef","sha512":"613247dfd2db776929b339a4482ca743e8c62314e84037aba6d1ffdcb86a0046dd5f5318375e87dc896e0e099ecd4e3e8ccfdb4ec22953b78de5a5164ce1fe18","ssdeep":"768:vJCTXROWgV/LGbzjfxHgM3Ay5GFqCtIhnfBT96:3LM3AqGFq/hnfBTI","tlshash":"32d2e1132d79d0d48b6e580660c25824c74086e625a06e5b348ffedd63bd645fdf4caf","first_seen":"2025-11-25T22:34:39.269327Z","last_seen":"2026-07-22T10:10:47.968694Z","times_seen":4,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/all-american-hd.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:36.223Z","timestamp":1784715036223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/all-american-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/all-american-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:36 GMT\r\netag: \"dhcvedqbhzrenb9\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xd4YFkUbLYWjFX93zBuEY5AHWMm8sXLKdEFN%2F%2F7lhl1hUzCxR3VzzP0JLAFGL3%2FDc7cNML%2Fi8YvWvLzfSh8FW1W2NHPHeaZc3itQExnVJ%2BzeExtlLJOI2Z1GvtFczGMwg1Fe469I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a8106ecc5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30213,"size_decoded":31235,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d6311ef36696c4325d58b801768765b2","sha1":"5aa040238ec54c17b1261472b0990e2d9dcd16cd","sha256":"6a05587c0119b8a5244d48eaabb006ef649e7d27761c9e6140c50def8abf764a","sha512":"275d16ca225ab07221259f7778c87454322f3703c3f98704417581fc8fc51b7ffe0ceedebd31d64b41f5368bb8038770fc8ee8599a35c069ae5bc3cf7e42534f","ssdeep":"768:pwd6CyNVV6AAQhcdOIS4znFv4z5YZFj204F:pwdG6/NlSYF4SZQ0s","tlshash":"79d2f1e650450a25ff5e3ebb2a18a275d9e7834519d20ef3196f060dbb8f9840c026fe","first_seen":"2026-05-27T18:32:05.481824Z","last_seen":"2026-07-22T10:36:34.497935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/previous-arrow.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.570Z","timestamp":1784715013570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyUI%2BvouJTuVrH2uHBLVh%2BvvL2J9Y0QIdJaNtqewOgIihvwSDjWiJ1DKZroRxwvl1ZcR9RYvC2UN6ATojaza7pF3bmIVJDJfCfM0MYxLj7qgd4QrvlQJfQamCqDlxrdTmfGPEtmI\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcver9wwnga6n\"\r\ncf-ray: a1f1a782c8885696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1166,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-23T03:06:57.101599Z","times_seen":96,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/wacky-monsters.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.277Z","timestamp":1784715028277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/wacky-monsters.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/wacky-monsters.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedziilbglli\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLVpDBBMuixIXo8BPfv0PDv2iUsDwIMIikl8X1HMvNRxUNn7CwhXx2jIhv%2FxhThpKkVG%2B5yMri2K2UYRNE7Rn1bCnw6JgRtJWkLlhQUqQAP6fc1b2tl5xQKlVoTy8nZtt4%2FQ70it\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7debcca5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27990,"size_decoded":29007,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ddea4dd4eb36510778a9f50883d3f30a","sha1":"47f62d64c1b06ccc53ec7f6422fbc981ec1a5886","sha256":"2c7a5c5160bb1cf47b1613e4189cd2c5e40a2b6d2a1a502c0f8d68d860637947","sha512":"46620cf1aa065d813ec474a33cabeee84ba61f26face5cfc48569e1847495e952649e0fd1f70097e5121232eb9bbf42a289bd823d9767c2f4e929e32e152cec7","ssdeep":"384:hx6Ik+6n3sqYTpdJgQvX+bzY0OvA29DKCHWgEwsdXRkUPdc4RqUWsnreYD+STGoz:SIk8qYlgQvX1vvAoiwMXaUPyXzsqYvsS","tlshash":"7bc2e170dec46d9ed25b2b33dc4552c1d97edc08b7fa1977ab6ebe006b289500981638","first_seen":"2025-11-09T11:22:30.373693Z","last_seen":"2026-07-22T10:10:47.971243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/rise-of-egypt.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.281Z","timestamp":1784715028281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/rise-of-egypt.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/rise-of-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedy99pd4g6t\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwAkkLBOSMDgxl9tP3T0jIJ3E4DCnnaRRmTTzBU%2FJgEe7qrNehcuXrE18Avd1Yf0Cj2HgSGhcPbOUcUml6rAxaL36PDX4wEUhOEINTrQXSD%2FTwj92jNJQS6vYG2uM8V4eoj0a8Lh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7debccb5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20981,"size_decoded":21995,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ea424ded8ce26bc51d3e45a2091f7f3d","sha1":"9c5634d356f1b7522a8d713f99c78eaa24c2a163","sha256":"52fc69a694e48966c6b98e3d8314e46ec3d87ed703bcd375f2b52e0ce3a658e0","sha512":"623d17c815aa3501ed2e436dc642b71e7986619f65c42fba6890207760c36a644cd45a49d37e6bfc56e89e320c57cc77353e03f3cd08bcbc90e5be9264da0d35","ssdeep":"384:nk9aey6u7AFwftXl6jeAz8EhdxAOtPGPIQV/tSuggKod:4mvhtXl6jeAztnx7NtmloJod","tlshash":"1992e1630cc95a64d3bf4c2e2eeaf3a0b141c6817a39067e5c51f5e327a65204cde3c6","first_seen":"2026-05-14T22:58:26.695873Z","last_seen":"2026-07-22T10:10:47.971828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/desert-treasure-2.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.307Z","timestamp":1784715035307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/desert-treasure-2.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/desert-treasure-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedtk6t46r6e\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FUgK1ZJD05xtdDwv2ftkaIwRu3uYVq9DK4KrkIX3O30Uxd6uKt22WIgms1%2BSmqG4fDmdsRLGlsKZuTtQZM7IzGZqfzYLwO%2BKOODghZp64WipDu6H4IcattxPUV7EFKtSlwg4VJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80aae8b5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35222,"size_decoded":36242,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"24037dcddae1bf2e2022cbe6cd965936","sha1":"c0d2dd4574801ce30b0d8aec95f60c44d45c0d1c","sha256":"4f490e9f49785de866826c93b0419cc3d60415aacbd11027efb3b097a1e5b7f6","sha512":"0fdae09137c1476c9e2eecba45351d73a3e9029365daa869399fd57936abd3ee3e7ca7ae1a14c3d7d47e8bf0a9e7a3292fbc079caf59cf71fc9f3eaf61624de3","ssdeep":"768:0bGBiGzV/3q/0uveIjEdezkk1Y8ghm/JGZf+87E1FC6Y9GseM:0b8Y/jEdqbRGd+E6YkVM","tlshash":"27f2f11b932646f3e42e5afcc3b46f495f55a822bda538098fcc8ffc52516811acd835","first_seen":"2026-04-10T10:02:45.6991Z","last_seen":"2026-07-22T10:10:47.972355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/play_icon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.576Z","timestamp":1784715013576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwngagw-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcA1DjMere5qSSh3aEk%2FlrkVwyhgdKJ02b8Q8f0U3F96PpNW9BJSFr1WQ8sREUjgNm8qdlEaEZtVk1yoBEC6nd7wGRw5cR6X8tiLgubY%2BJD8WGh6rbNNHQ0Cdh1W37CyBtvwLKdc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a782d88b5696-OSL\r\ncontent-length: 317\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":608,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a94e7b7d682e6965e90fd1c8c1e26588","sha1":"92bdeef1467d74e4c07e379d7854938d7e452331","sha256":"9b6fdbc7ba3ac3786f4ef6dbffcdabb777c75c65fba811a71d63e9687abe49a2","sha512":"1e7e06a15abd8bb77e04f29b5f6e9d253812858da1b15eae10fc88458cce7452273421c57b3885b9c33f847b5a8228d09c525adff1ac455fe66b9d8fed19d5d1","ssdeep":"","tlshash":"7af0ac96a3fc32d4e1809fe134e1242134ef28e73445cd26dee86a05eaf71cc58d8514","first_seen":"2025-09-23T10:56:20.464745Z","last_seen":"2026-07-22T10:36:34.611594Z","times_seen":41,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/poptart-ak47.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.610Z","timestamp":1784715013610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/poptart-ak47.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/poptart-ak47.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedosq6jy5bj\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBnOJySbKRWjAJL%2FYBhNpikfgqCcMKTC6k47n0zVqivvKEh5MiuTo8sR9qjHhI3ppmkA6Nd4jU4CMDJ7iC9FuPn60afdmxW1qEYonFzCux0Qy2yxL%2FDuBbvIEqnroNEDQii9R5oZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78308a55696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6895,"size_decoded":7919,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"da7ea66567d65b21373e6e370b80f238","sha1":"a661eafad4e83e16e3ed0eac187512a8ef378040","sha256":"335dd29ad81df4f7585ec5d4a9753c5acf4f43c01564170862f4c40a249dd92d","sha512":"095b1c99ffb02b5df27ab0bf2b3782dfc8f7a7f0e847b48fc8f219b1f739df4363a3743160ed26e1396836d3634cab35265ad4dfbfdb156da5ee8f5630e434bb","ssdeep":"96:JrhpsCWQwtOavk6U3FwJRDin5IPE3JCuih57to7qJt4JAVLVZ5zKctV6:JFp1WQwt9M6G4mnBrgtogGcLPtKc36","tlshash":"02e19e0cb356fe36dbed15f1e428123cca535dc4a509de2539a715418bb60e1983b3e6","first_seen":"2026-03-29T06:05:12.897236Z","last_seen":"2026-07-22T10:10:47.974059Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/gekka.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.612Z","timestamp":1784715013612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/gekka.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/gekka.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvednt07ur3ru\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=If6%2Fc%2BYrDYWZJoYbPGO2aJKy%2Fhj1yCe1GGVvIihOVjvhCQORV2fqyeyk7qK4jMM1r7WDy2cmlCV4i2pebpbR%2FVb%2B9yXp8yu%2FwpZd3d%2FSZi4cfnX13oBrSdUH1ARaoLmyQSKw8p%2Bs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78308a45696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4890,"size_decoded":5919,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4189e30dc55725a711d1abae94c16287","sha1":"808e87e1655f42e18a5ab20153c2f3a5bc082c0e","sha256":"11262e538714fd077e5e4c2cc85754ceb85c56958338893dd55cce0bf2a207a2","sha512":"bd049dd9682135195680962f9cc608429b293dee082fabb9629388e6aeb37fdb20d520a1ab37ef6fc9ae31de5de104c50b0dd42580df5809f0db9b77b36adeb2","ssdeep":"96:mo8k6OYIQQKE3jfRMl/bDNotQd17T8QYGk1pFaQzGFsZAen:X8vOYI/KE3jp83qtDQA1Tazqxn","tlshash":"9ba16dd713a5b516d00eb57f44945a215f08af51ffb3a32b1aa089fa1324073bdd4462","first_seen":"2026-06-15T02:37:07.710031Z","last_seen":"2026-07-22T10:10:47.974544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-5.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.634Z","timestamp":1784715013634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOAMnzaCf657Q6ymMAHB6iHivXnP1G6ZdHjEvXS7WeZQuWcO9eT3A07OD6r4oAGeJQFD0pf4dee%2FwmTgbDVP%2BvXXWJceQoIdV4Eaa6fXT3m3a6cYkJL4XP%2BPUWPWlLheD0CE56dD\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcver9ndq76db\"\r\ncf-ray: a1f1a78338b35696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1289,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-23T03:06:56.981164Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-15.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.652Z","timestamp":1784715013652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7616j-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO6Avzo12%2FXjTSwl5euHiLomR7enTI%2BZCPYuhrY7O6KXI7Gn6xLc6rMuNGmBI1kW0fY6meVPzmOYCW4j1xiwFjwk3zBqhDMtWPxL0A95ppYRGaLgn2ZFbJ5kSGS5zEgKtd6e3aQu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348bd5696-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1799,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-23T03:06:57.248409Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winner/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:20.871Z","timestamp":1784715020871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fr-FR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"154\",\"21\",\"930\",\"370\",\"529\",\"533\",\"235\",\"770\",\"600\",\"311\",\"613\",\"502\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWoj3w1va%2FRh34EP6XN7Dr1qVnZX7fQ4KpxU%2FpFOBKEw%2FsQ%2BQXxKjx2ZdXb06cujhhPx9C3KqV0NV9xdArQw0YOfwq2oh5rf%2BEIGPTR1Ht0aNRfkRk1r%2F2BEQTJPZOPY4zF1AJQT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7b08aea5696-OSL\r\ncontent-length: 222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":580,"size_decoded":1211,"mime_type":"application/json","magic":"JSON text data","md5":"6fa57d82071252cbf5e68f91be3e514e","sha1":"61030a69f250aa1d627c5e2cd0511f7a6e527d28","sha256":"3198516d44aebd08fcb723cd68a14bfc9a310b0d91dce3fd2a6afb9f40d654ef","sha512":"6cf910770632a49a0a2207c6e001b96ea96369ff802b4347672bfb209b6edab12dc1cc2aa2ad8d432259624fd226a383d1ea3600837fd2a0aa1404783ca4487b","ssdeep":"","tlshash":"35f082666a61a73fa18340d0dcb7efcd1404e962596d8434bdbf29a2d3225542f9870c","first_seen":"2026-07-22T10:10:47.976602Z","last_seen":"2026-07-22T10:10:47.976602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/twin-win.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.295Z","timestamp":1784715028295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/twin-win.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/twin-win.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedzbdedlklu\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnqbgoPJszuxV9AMdaTNtVyXqt5aUxO8qyOIYxRPCbUUZ6XJZ%2F19K2ixcxrbGsdy984uJMmEF6UBNxcngBpm3QrqiC6V%2BgyOLR3JGvdeElr0XH1aj12ys4uaEVz3Pm9ZSmEvcAep\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7dedccf5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26706,"size_decoded":27715,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f21bf3b55365a1ab2aaaf7f6d6a3c8b4","sha1":"a465dd0b013eb6e7dddf8af0a98625cbbf6803b4","sha256":"b6ec1ff216d2a9cd7fcb514e85d306b5dd898b50b0498e11b20004743bbb62e3","sha512":"a261d1b349b25b594817a6f08f96a58f75d097b5c5ffee6cd85030c0ec30f873b593c3b5c1c6e36fa8b8ab60efc9959196007f73c77a02fd4586a4305dd1e632","ssdeep":"768:x5gIhJMXd+CvE4RLhNGwoQBvKlsAxuijQ:xbMXw0stQBKsAxjjQ","tlshash":"96c2e18d474d9dabec2c5ef872136974ba948caa1030dfde210268bd5f51da1fb301e9","first_seen":"2026-03-16T14:22:50.82854Z","last_seen":"2026-07-22T10:10:47.977499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/roman-riches.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.591Z","timestamp":1784715013591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/roman-riches.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/roman-riches.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedybnfoembk\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A0DJrw9szs09jXRFQK2SbBCz4NgDIKdpjuPanU6HlsbHfS52L4NVBwozDylISdGS9OvwIveP6K%2FZhK31TLYJzdCyRNug5DAcRN4ZyXt%2FbL0N0oa4qKVKAW8DfX1bD03dAZ6agVt3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8955696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28928,"size_decoded":29950,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"29b04ba0ca99e0a40e927fdf81918e62","sha1":"7064a216fe6d0bb01d3ec94993d6f7c04558262b","sha256":"177c2e1a83bfa0caacc71011322c7e82cb44a596fec1ede3737cf4a5f19fdd5b","sha512":"9f7c53c32f5cd0d8d100503c075aa4489873c628e7f1073a4ecc47aab4f0a60c1e9119be325348a67041473b3ce666f2fab881cae59cdb0790523714fbac2aa6","ssdeep":"384:t5yb2LYDJb7P/8kUtkmY43Cwaxm5r0vADlqYTyBWwItTEuIi6pB46xOEpyAkL1sM:vyKLIZCs4KJ+qqZxhR8TOEpyDsNW","tlshash":"b2d2e1f076398198994f27aba708f16996741e82cd2186d5da5e04f3f7fa9c4cdc04f1","first_seen":"2026-07-22T10:05:30.623145Z","last_seen":"2026-07-22T10:10:47.978485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-11.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.644Z","timestamp":1784715013644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq76i6-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGdpBADtm38aXmkG7tHGM6Z6W%2FrebdK7axJrEIdVDaNr1sPJEWd2UxX0A9ShEZq7wD4FppASUj6o48sVGwN3PX8aQJoYTZOmhNBV1w%2BCckPlqMYz0HvGs1eo0DYOFXrfxk3zURFa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348b95696-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1379,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-23T03:06:57.093169Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-17.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.655Z","timestamp":1784715013655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq762dl-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmE%2FkiefTU71nT1oKChuebLimoGAXp7fMjDlNaq59%2BhHLGWyKDh82hUQcjW6xfgF0bxlaYGOmiokIQoyB1DMj19OlHwzXSfm%2BuEZWX%2FFT7Q3SKJkIy79gVrhuXouIJna8MzYpUwv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358bf5696-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":2396,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-23T03:06:57.254083Z","times_seen":73,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/gambling_therapy_icon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.665Z","timestamp":1784715013665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/gambling_therapy_icon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/gambling_therapy_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvwaip-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JHlDsiR%2FwmB2TCCH1vBHYKO%2FZ9fWpe6atQe%2F9whc9kMuoIMYgFrnC16RiGIBUgiJaaWJkQjK2F21vv4ZTMBDYW1SycOWOBQK%2FVhUsZ0JtLutOY5sfqh9BDyT30vNlaJ0H9k%2B2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78368c65696-OSL\r\ncontent-length: 5576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13633,"size_decoded":6620,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c28a2ec537870b466539e977d126a642","sha1":"411fb06c13fece6d976e46adf4e1853f217e7dcb","sha256":"4dc1e85f5617c3e16712c08673aa0d62f148e3cd7927388fb07234e10f837978","sha512":"2c4523c09af461fa611146331221251e8ae5ede94f5d6553643be12c76d03acfbe144a2bc223dca00d734e22b18b41087a36c11169f773434cdf1da93c244e00","ssdeep":"192:eqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sBMZRN:eON5+E/VumjLMAzj3wB2H","tlshash":"5b52b5fab3d5b2e8e502e7f0e12584317faf34bbbba6c658c6842dd0e61100c5e658d5","first_seen":"2025-09-23T10:56:20.459959Z","last_seen":"2026-07-22T10:36:34.504935Z","times_seen":55,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/build/frontend/images/separator.b41ea2aa.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.144Z","timestamp":1784715014144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /build/frontend/images/separator.b41ea2aa.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/build/frontend/images/separator.b41ea2aa.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcvh4dlqphb1fl-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:59:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9wvLiVD863wSFSfpG2TnYibp6qSgZvHuSR6hNQCM53RyY51iSlQkyVMoDdEPenmvTXQ%2FGmJiKXDRmXlC2AmqlNWzQjoghwwJXG4ugj%2F6Y8iQ9VyN9U7imUpWTO7gR%2Famg3pV8o3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f1a786690d5696-OSL\r\ncontent-length: 477\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":1531,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9daf1b07e5b803bff6868eb008f09ffe","sha1":"3218da25e54049accbecade543d951e38f2b65df","sha256":"909f4c851ec36c9ddf133927ffd875944fce26ab178ede5c225d633c7b2c849a","sha512":"054133a5bbf13be7352e1b2d1f4563ef67521c227b80c2fe9fd2ac3588b074baaaa637db1a728f1fd55c36af78548f3d3fdd00b43666973d921ba2d415bc893f","ssdeep":"","tlshash":"0e31ceb4322cf019c6194b0af1e36af8109fa2cfcb62534dd29079975925ae739147ec","first_seen":"2025-09-23T10:56:20.413635Z","last_seen":"2026-07-22T10:36:34.505557Z","times_seen":45,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/avalon.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.294Z","timestamp":1784715035294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/avalon.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/avalon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedqnenbthrs\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OFrpCBJcoVKXpDIWosVi9qTdPf%2FhodOwmg%2BnY23rn5AiXdsRHBFigj%2Fu24%2FNDpiGB2yxNwbMS%2BNltWGeRqFD4cCrfbKneg2FBFSDExtl%2FVO%2BsEXRq%2BloeFdVtNnin%2FG8AFLjE%2FH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80a9e885696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23032,"size_decoded":24055,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"5eb78f451f8efebebb8502ef1457fcee","sha1":"231da564dc97cf5fb86e9791b4d773b536df01d6","sha256":"efb9464d7f1e6b32dcd051b29f06c98b697882c03982b1c19f5cb1f0360b2303","sha512":"c073367a2dfe784c98122d3326aecfe04eaca3c541c38faeeae2c15b0cf5951e30dcd3c1b6d1492929757f77a58ae2f652bed96ff79fcbfb139e21983e08b291","ssdeep":"384:94urND+mzOb9aSE7gs7peDkag+WRI/d/GyG4e7r7dG7Qcd7yc8v:amR+mCnG7peng+Osd/GyGpbdEzd7/Y","tlshash":"ada2e1223daf889fe90c6c589810059ac7255ed1d151bb52dea2de0b1f3b5cb133e783","first_seen":"2026-04-10T09:56:45.830903Z","last_seen":"2026-07-22T10:10:47.981437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-13.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.648Z","timestamp":1784715013648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq76f1-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HP09y9%2B6ywRket3LgOsNxp4VIUkVmw5XPOARCq9zM0%2FQQYp6dyRrpCvXwDJUtshtE9p1DIW5gNAdhoDTQsi5Kp%2BV4l3v08c4wVGnO%2BqoS%2FPYrT67MMajkXf7Uhdo9gRvBLYc%2FO%2BO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348bb5696-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541,"size_decoded":1358,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-23T03:06:57.239189Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/arrow_left_icon_v2.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.566Z","timestamp":1784715013566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHJ%2BevcxwJliCHAS6Ql5KK0SUmrPr0eyBVOwQnZ3k7IxxOGybLqqMeG0pG7Am7VmKWgutz2wV0nNGx7Ul0McvcVHt4lzhx0WHWJg3Xo%2F%2FCFWbZOB3R1X8hkYavENzDhTEQ300ESg\"}]}\r\nage: 332\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dhcver8zkf2d9y\"\r\ncf-ray: a1f1a782c8865696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1194,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-23T03:06:57.261993Z","times_seen":56,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/luck-of-the-irish-megaways.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.583Z","timestamp":1784715013583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/luck-of-the-irish-megaways.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/luck-of-the-irish-megaways.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedx4sa1cpx1\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbD9knMW5rQ9KuRL5NIlrHwYDShWoWKcga4QOpMYgoFChRLjNgzQGaYeBLFToYj0ww7i4fcaI%2BT0O7hA%2FQUOtlkNff5fupOu%2B6fEfI%2Bvewm1rLw6YzSpIBRHQ9S1lxetPsbY5Zp8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8905696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33589,"size_decoded":34629,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"6375493a84fa5a017150c92f9a68d25f","sha1":"234c4d35f7206c7e663e8f59c3937c383427e7df","sha256":"2282abbce28c76407eee46ac8f108c2dc4bf366faf41116e3c55836f523d82d6","sha512":"66dc22327674aec2c333e509580636f606b9d2f228e2e9525bc1fd55824e4f1b168c61151551245369df85187bc8eb6e5c10d8bd287956824cb4df9c425de06e","ssdeep":"768:gZV9ymAcmFBOW9wrtsQR9i8yEYtmBp9hr26LxdGy:gR+HatNR6kpLr24d","tlshash":"aee2f1346fafc48cf098ba144319172333697951d2f985bf6e5a63436b8d2f0b501aaf","first_seen":"2025-10-14T14:51:48.981845Z","last_seen":"2026-07-22T10:10:47.983536Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/bars-7s.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.284Z","timestamp":1784715021284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/bars-7s.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/bars-7s.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedquju9nq61\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtSJyH6%2FPe%2BG5fN3JoUOsimE8TQB0kO1CrQ3R8nVPhoOJ8ZEpJHsp0A2RFCCvDq7v7r9KeHWq1MyafAEI1dMECxFauhcR%2FgTLQGG7eY4OUjtsTQWtMCgYMKciEFt%2BAwBIfhPbcws\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b30afe5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33913,"size_decoded":34925,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2cbc5c0808150189f6c9a8bc01ab9303","sha1":"370f7f75c320f8627c1b74acaccc3b4b526da700","sha256":"cf830314b293c07ac77cd2d9d8c7bc3497155b7e8d8580e2855131285e6c9336","sha512":"3b257bcca67ea72fb4f1548c660e0a2bafd2bd2579d661046b50cae2ca2872a85909b8719472309a09d710930503f1c91ff1478efd8a31bec2af8cc17f2013ff","ssdeep":"768:t4rP7SxKA2phhWVXOR0yrBtWlrmC0ugnLf+nK:irP2xaphhWgBrBMlr50ugz+nK","tlshash":"c0e2f1691103910bf70b32406bfc616e8daf0fc022767d3df5655d949b7b18b8328ab2","first_seen":"2026-06-13T21:57:34.637585Z","last_seen":"2026-07-22T10:10:47.984046Z","times_seen":3,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/busy-bee.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.259Z","timestamp":1784715028259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/busy-bee.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/busy-bee.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedmqwiu96ti\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzLWpqVFcJm4HuBlkqs44JXLfS9Fcbf22YDhBgtmzwaDg17C5U5cSpvYZwz6P8zlRCRkDpcCcVEtprkDKL2dtEF8KpjNn9GZWpflNA5pAfJzC0p11uDSvt3JwMts3vaNRM0TWM9Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7de9cc75696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8838,"size_decoded":9845,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"8680828e54b9b985cacda2e2582db436","sha1":"6d99976a879c45dd082a04cbf8ee36bbebba6677","sha256":"94a63653f56dbeb6b1b70888e4b8361c8866b3950d3f5edd276ccde80cddbabf","sha512":"1ae9623161126e149544552a676a75122d1806904bf817034af18630b1137f9923f0b499da6da7f04b7e9b9e184797b4d2a77bbaa02b420cbedfa140e689bb2f","ssdeep":"192:Fo7qgsOwDTexVBulFOEOf8dP8cH3EinfwETzU0zKpr:i/wuxGlYEO6n3EixfYpr","tlshash":"5502afc94b64c460e55d2777b180d7b2ae187894523ded5e39260f18bbe359350ca2c1","first_seen":"2026-05-02T01:21:41.057893Z","last_seen":"2026-07-22T10:10:47.984863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.831Z","timestamp":1784715028831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:29 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GM%2BSUajbBu8Cv0sSuLduFmwYFovkzOuRkhs1I2n%2Fu8621JvJaL7z9QfC36yvt59KbRc8lbaes4vzuX%2B%2BDDwx1C3qhq5kp%2FTx3n0p88COWGg2Yv9AvbJDVYocGFWrVaW21WCJXJFs\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7e22cf15696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84,"size_decoded":1036,"mime_type":"application/json","magic":"JSON text data","md5":"aaa29e4d71fb9162198cff9b0eb6b583","sha1":"b285f5d1f11fa16b9982f1b6236044548fa9ec6c","sha256":"a3a936cba25f7263af77d6a0dfddf2ed07f550bb8b857806402b775a049bc6b2","sha512":"166dde112e525311c483ee057a4c7cb5e439d00aa69477f71ef2adb5cfb2b0720eb5dd99752d94da6a0a25e7d046d21af6634101d68798fe6d211c358ee0c21b","ssdeep":"","tlshash":"5ea024fdd004544dcd775c003c5733cc30340d4700707c105fc4cc400510045004fc00","first_seen":"2026-07-07T22:35:33.39004Z","last_seen":"2026-07-22T10:10:47.986429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/choy-sun-doa.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.315Z","timestamp":1784715035315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/choy-sun-doa.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/choy-sun-doa.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedswdhzdkjf\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJClcl1Ogq1vKoKUFdWOCrKK8tK6BDlzCSmEVr%2FvbknUThYW3uKCdsr2vqlq8wlMr2DkEsfE4ki72fo9bLv42nWQWtJffs%2BuGz%2Bw5aEv8AObUFuS7MQADPS023WCz0Vs3X7cSr7h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80abe905696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26619,"size_decoded":27634,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f3af923bab54f1085659576b042b0284","sha1":"996bb9b42b6864a978317b31525008368a3e7a29","sha256":"ff9e2244fba3d231ef2daafb6e85de592adc2d6a5ba792291db49e1c94e3db7a","sha512":"8ec60a4b2b82afc40306521cc0325a299166ef8c0a1219189a2eac59cd9810795b949355e83ad00758ee93d59325cecb970495b08c79c8157cb64a8fb8a7cbbe","ssdeep":"768:NwymAQcsJeg+049smetJXml6l+I1/5nHxlDzyO:NwGQlJecy6HfTyO","tlshash":"79c2d1b0936ba04843f959b70b809f41c7d76c5f2ed58fb7b7e030aba53919119a0f19","first_seen":"2026-07-22T10:10:47.987261Z","last_seen":"2026-07-22T10:10:47.987261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/fruitinator.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.582Z","timestamp":1784715013582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/fruitinator.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/fruitinator.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedva3t9ggja\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm6V0B5yQzMmtI3H0IN7RgqBRXlncpJ2EDKfhYzQlb3f8Aqoi2flXpQyQvVv3%2FbmfTcKxYITkVCUwrRibiHghVfMPkDEkMCsEsmzMZ%2BA1wVFJXm1QXOjBm3glZclSE2HOLZur9Vf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8925696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21430,"size_decoded":22451,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"25c6520c6c10149597cf0f703c80c5bd","sha1":"8b9b7f9ddb19eac140fa433c28909873b833dbf5","sha256":"26b3496881945de7f01e5c03e4488a354a1374d9c1fb4f107a0243c8ec382150","sha512":"52c05942c0f5cb48ec4001a75f65519d5db50e53f7f48b070bfb6e9fd7dfc7f93d4e339063192786a8d3dfbe2d164cc2b896d382141b04f232b2f447ba0df4ba","ssdeep":"384:1lPIW93bhO7b1BwDpq9klCPZzBFtFVTj0YJN219/ZMj:3PjRduTwtOklCPZz9Fhj0GN2//ZMj","tlshash":"f0a2e16783f38d2532cc3467106db5215639ebc7f275e7a8a9c2360c225d1f73e98284","first_seen":"2025-11-09T11:22:30.37937Z","last_seen":"2026-07-22T10:10:47.988407Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/license.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.619Z","timestamp":1784715013619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/license.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/license.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwnga174-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSd0xbLszCTo2tmV%2FnNGiheuRPaMZICusiwgMlfDI%2Fo6Ft%2FS%2BUDMtfbcoS9ZxDgx8gRRZrToZqEfDaHaPlh2%2BmugYaeFClNl6NDhOwm5c8O51Wci1kgEdWJ7Vy5WLwws96%2BO0ldU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78318a95696-OSL\r\ncontent-length: 640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1552,"size_decoded":1671,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60f22cba2bac9a05bef00a7eb985a8ac","sha1":"9834cef7ed86d96cd99f934280476d5106f428b3","sha256":"51ac946a6768f66b083571fdeeb0f8c0ccfd08129d75b75cdfe2f6454088d971","sha512":"ddece8fdce41b8ce6e08f7307e02279f049158fbe4004ca81b89defc50f3032b8794a44e16fdefb65a2ddf49798cd53d5f36568aea58e2e5e6a63b0957b3dd90","ssdeep":"","tlshash":"d831c1f7939943c8c90ae77afc3672a064bb14fdabc49ec8c350ea421c545a7c8096d0","first_seen":"2025-11-17T14:16:40.673556Z","last_seen":"2026-07-22T10:10:47.988939Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/banner-jackpot-69c5656d439732.15951600.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:14.147Z","timestamp":1784715014147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69c5656d439732.15951600.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/banner-jackpot-69c5656d439732.15951600.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:14 GMT\r\netag: \"dhcxh7h3r01s2q5v\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNMqxv5okj5eXi4LtO%2F7owTqFAKRz5ARJTQdhLO1r5wA2QRWB2FvjRUjicbvsVPIViKFaH38EYT8GDF%2BOGuh7S2G5zTEkRlukMoHN7uUSNkeD8o5N4i9X7lebJ6ZIJEegUVIiyhj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a786690f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127219,"size_decoded":128275,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"a08714e96708de8a81617514a7172b89","sha1":"c8dbbf5f6e77d0c683e8b5ed913e9be97acd579f","sha256":"6de45a94907eedd209d5724394063247b49165e6e3955ab428cebbb1e1d6f666","sha512":"38d3a7867efa9194f6468257521da0a45bfff49c809727adf83a3303ef49ed38c23fa29e93d8d7e48b678c89100a3308fe6fe64b855d683526d23c90f6ddfcf6","ssdeep":"3072:vwfqkEnGBi6XXmjXifSWc7oVlLYGRu61KYaKmf/Ngpk:ofSnoiWySKR7oVZbRs9Nok","tlshash":"38c312af4725384fcca90f18e5d41fabd15252e22018eb7f5209eb06f6c3683e4b9b15","first_seen":"2026-07-22T10:05:30.640006Z","last_seen":"2026-07-22T10:10:47.989439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/baywatch-3d.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.311Z","timestamp":1784715035311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/baywatch-3d.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/baywatch-3d.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedqwxkkxoyi\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEubEyuHo9z%2Bxat9kURkVOuf%2FFt%2Fc47HHgMsuWV%2BXTrHzBRGeV2HWQQgSGMTuM70U5RR%2BlaCaIYgxRftg1YbYFcm7utLoBtmpqjqltUKxxZGHU0Yv4yTmJNZgUdX56v2VSzlA3Ex\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80aae8d5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":33364,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bded90db50af40647d2143b8d79b6833","sha1":"2d7a116f3b786251d659fb686df17c34d5a84f0a","sha256":"473041f1e12cf768f8015cbc666abbd1995f617124d422138e2b4d16d48791b5","sha512":"c7ddff2211b644ea4b09f902b1b4149a951c972a7da02f683571416c898546bc87c560980e3187272c0c91fad2fd4e51b3397fa9509819d206d89c6eb4d389b9","ssdeep":"768:ORMqN+SAlpLIrmCg+lxLy+307aalWJ49L3QBBoDt2u+IS:mMqcSALLIrXg+3puY496a2qS","tlshash":"e9e2f13bbd83c4f4d09e293b98145566a750d5450a0bf3c6bbbe8c115e0acf01d5aba1","first_seen":"2026-02-10T18:41:07.231303Z","last_seen":"2026-07-22T10:10:47.990264Z","times_seen":5,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/logo-69c5656da4dad1.70170774.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.560Z","timestamp":1784715013560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69c5656da4dad1.70170774.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/logo-69c5656da4dad1.70170774.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcxh7h3r01s5rg-br\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdshsXi84lPjhWG%2BW%2BOPJIwsHzvH17Gr2Uoga%2BY7SFRPaEguyc%2B0ezKjyZTRROJe0htBEd%2BnYXtOupOO0oe7jatVCf%2F7izQm8ClBpDwGjaw2cZ0RURpRaAWNNl0nR8q0zlgMlg%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a782b8835696-OSL\r\ncontent-length: 3345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7468,"size_decoded":4418,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0395160c2e4611ae5758d0fee241b8f","sha1":"cc37cf9ffde6c684ce9ee7d84a234501e6d14c3e","sha256":"350ddb9948e7775236b470d6eef852c2fe61b4498d61d24fdef720657d75189e","sha512":"83e74196563da22e1ae36e5a36540cdf7985e19e1d24b77902f87ceeaa2bb06e8cb91b3bcfb19a36c18eca9983db2a9f45afc4973a39ced42834e22c7f0ccb42","ssdeep":"96:YbA+/y7l0QJHLX4xSvz/Q8Cl7Mps3khFbDQy7Hl3CunJlXuCGEfgqo0hXoXSRyzk:YbZKjJsxaz/QLQLLHlTuC1bBoXftVPw","tlshash":"a9f160dd2f725de046cc8bdfbf1250ad686790b79c9a8958c0199f0819c2c2dad0ade3","first_seen":"2026-07-22T10:05:30.579777Z","last_seen":"2026-07-22T10:36:34.475951Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/open-graph-image-69c5656da64c00.24008406.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.616Z","timestamp":1784715013616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/open-graph-image-69c5656da64c00.24008406.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/open-graph-image-69c5656da64c00.24008406.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcxh7h3r01s1y7u\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPYgsbeWqoyeeb%2BJwhtWsUFO41kwpPxELXVm4HALgDo6X75Jh3KPr%2BKNCOU0ILv7aQuTa3S%2Fmiac2tpN%2BT86kMvl4tBIk9ltbHMO4XhodT3AVz2f%2FK0sWILywe%2FR%2FOKOH%2Bz%2FxnK4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a78318a75696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91002,"size_decoded":73113,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x630, components 3","md5":"a0d38b73c88e30223aac03057a81fd93","sha1":"af3553c792031cd2fc54fb7fc35e0cf0e0cbce51","sha256":"e2101d98c7fd6bd2d69e418028c045305b378e206c17505e7846b554ce179dae","sha512":"d6fea6386ffb63914c419a8d8d2331d9645180cc912e6df610f407625a0a77bfb647266d6fc7393495326364d17d96b667c8413ecc77d00c0bb16a2a39934fd5","ssdeep":"1536:JYRPQ7JZ1Q62QhvcIklQzVgCeC4Jlxq2XH5MVd4mxW:eQdE62u0IkOVgCaJlU23J","tlshash":"3c93dfb9f7d3e3616317926e117cbcb3a77101d826ec504765930ea6ea88f3426131be","first_seen":"2026-07-22T10:05:30.521961Z","last_seen":"2026-07-22T10:10:48.006059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/play.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.624Z","timestamp":1784715013624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/play.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/play.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwnga1ir-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SfiU3GpgVR6MV9iej%2F2UDI83aPkYyq4CCZWzbD5AR1vVPRe3HX%2Bwbuo6KlC7xRVy3JJrASVPkTOYOr%2FMkizwx%2F0MCXUj%2B6cxHfFOFJqrjsS6chOqNEywYfkmkwvkxilUxdyqhfS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328ad5696-OSL\r\ncontent-length: 893\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1971,"size_decoded":1919,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1652dc836e9e756a570c40ae6c0a5bbc","sha1":"6d2243b6a0fa4bd2a61b12bf08968e3dcc5e6775","sha256":"e989bbb6613f7d37d8a9504c1c0a38a8a77dd884d8f61e583266413e786f3e35","sha512":"a106fe98dfead7d3bc32a965e2da47303c92e67e12300b8b6ecefde092f8137f40dd01e2fdcc3fe2bdf4ff0a70b79635b67a75a0d52fb9ce31a5a944c2d6852e","ssdeep":"","tlshash":"344143e113dd3158b582a7fd512bbc3a36020cc729168a78759818ebecc28ec8df0d67","first_seen":"2025-09-23T10:56:20.442963Z","last_seen":"2026-07-22T10:36:34.597344Z","times_seen":39,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/banner-popup-69c5656d4bbc97.29356650.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:19.821Z","timestamp":1784715019821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69c5656d4bbc97.29356650.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/banner-popup-69c5656d4bbc97.29356650.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:19 GMT\r\netag: \"dhcxh7h3r01s3vg6\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uhbLh7Gns5BsOb50BI8YyzVYqJNrxX8VsmtpvTnobI5xXtEk%2BZ5q00CrdXVnwIgouCcRQAdVHCKMQE%2FrmVEWmrBh%2FYz3mGt4IRTKjmIPOtjuY7OFyl1CekRl2iA7mVT2QHNpO%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7a9da785696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180726,"size_decoded":181789,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x342, components 3","md5":"b1c03e55786cfd0f22743e9f859d4516","sha1":"5ac64e9af2eb77fb82aa44eda558a9294ebd48eb","sha256":"9d39ccdc3d0bb0a07b0535db15e65ff7216691a97f191a8a150bfaf87471243b","sha512":"dc6bbd41f1c05056a334945289b73bccefe304805232fbb44ad25f97ed1543f3dc7501fbb7ad8bba4898e6565b3d993f1e4da72b0752334ef78492743db75f3d","ssdeep":"3072:AwKi0oP5TTk4S9OJAxVFrsfHgm31z4UkNJDUCiFRaf870KAkhUFwTQom:AiJRTTqO+qh4Uo9UCinaE7tAkhawTQ5","tlshash":"58041345774a0a13165f42b4373f03a1a6cab7fb157d013cd829a819feac9590c36bf5","first_seen":"2026-07-22T10:05:30.640925Z","last_seen":"2026-07-22T10:10:48.007487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/dragonz.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.300Z","timestamp":1784715021300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/dragonz.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/dragonz.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedu5mdxpox9\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7OVl6oK%2B2uutOae%2FhcVKiEAqdEOKmBC8lZsyI%2FAeoJ2jgSLF9RQHPh9QErTKnWYHnTislPengovXjflGeq%2FSfNO85%2FL2JqKrdZXsrdYXE%2FZ5OLC0e0ruu432QCRAeCTkWKM6lEu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b045696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32301,"size_decoded":33317,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d5a4786b29f3771543c10f0b6170beb2","sha1":"2dab87a2bbf2e426d83924b16d0b32ba9e7c64b7","sha256":"1954d57189bd4c7a4369f2382768ae09c888ff6f2ee51983846ab412e8cf1ae8","sha512":"f73f2b8dc6cefa522a004697d70d3081acadea11da763649b8058dedc72680b43d189c8207f48de49956a95a7c5fb12bb8a2f033778ac8f5845c100e31bda30a","ssdeep":"768:EcJsQKX/dZc2kzpsh7O37XoVcKr4MpGLfxvn:2Q6dJkq7u7HKcMIlP","tlshash":"26e2f2023bb9ada4c0fc52ae0631e945b79a0ac5a36579737301f46f7d2a1c31736b08","first_seen":"2026-05-23T22:00:36.654227Z","last_seen":"2026-07-22T10:10:48.008111Z","times_seen":5,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:37.942Z","timestamp":1784715037942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:38 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rc%2FGyPKsyl3OQu28sxpD1dutDzZPa7eKDS64JKfJcp0w56eMdPHwmRWSmPoGSboVHPEwXIpxkpHOQ%2B16e8EwFAXH5pQr6kJmGn9uPRZ5uXE29P5DAa5c8vB%2BFZfIfLQc2qsOG%2B5Q\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a81b1f305696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":82,"size_decoded":1033,"mime_type":"application/json","magic":"JSON text data","md5":"435587e6fb34558fe07904fb8cb4d9c3","sha1":"8e4d08ec4c0080e15a2fb81035b9484700ed4adc","sha256":"857526a9d2475aa8864930221ba5f79556e5eec555af7b61f2d600f2f75273ba","sha512":"ab596f559c224f65a5c34ff446970ba4f7fa637576bf763950cfcc90971b7fc3578aee25a12e00d319c158930654dd2740344f4ef7570df80758e9a61ee8ea71","ssdeep":"","tlshash":"bca022caf800ac0a2f338000eaff32c020200f0300bc0f202b808c800abc0828883e00","first_seen":"2026-07-22T10:10:48.008716Z","last_seen":"2026-07-22T10:10:48.008716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/2026/03/baner-2-69c5656d86afa6.86351771.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.564Z","timestamp":1784715013564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69c5656d86afa6.86351771.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/2026/03/baner-2-69c5656d86afa6.86351771.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcxh7h3r01sbuy7\"\r\nlast-modified: Thu, 26 Mar 2026 18:33:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckgVHgMXwpgj1l79DYcE2sjzK50MRkXjC5lVUrjMCXoBm37BFFxLEN2lNsUeTziNn0Lvlqk1Erp%2FhJOk2qoFCtkRouW%2BaF%2B8swfO%2BAjQ6nR%2B0frcmnKSm1nxQ2yvIYhJ0UAEwpFr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782c8855696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553327,"size_decoded":550224,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"1581d58c40323f708223fc1840a3ab4d","sha1":"fc8bc0a8acfae96217b3c6b6c3a28c3ee669417c","sha256":"e85ee4070ff88af9b0b9a1c2b45e1e95c7e2f447f56a577396a98ae9fa43f68d","sha512":"4c17df3bd784233e92def2587a7c13bbe8cd865122d473eaa80e90849abfb525ec82c6bc3f5798edbe3fd1be2e0910bf1673eed76dc7b7245900518478cad26f","ssdeep":"12288:ocCngojBuQU0IGw4BPHNKZQxSjdREmOB4xq2LaGjrQpPs:o/ngojo59GlBPHN7EzKOxX5PkPs","tlshash":"edc4237abf015a9a6f3c6230aa475f8e171507f075d9b8d267640d0efb8c60b9b9036c","first_seen":"2026-07-22T10:05:30.630735Z","last_seen":"2026-07-22T10:10:48.009884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/be_gamble_aware_icon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.666Z","timestamp":1784715013666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/be_gamble_aware_icon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/be_gamble_aware_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver96pm0720ob-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPnxLyPIEPp1SFUuZGQGshYhLHkWn7R5E13TyNfTKpai%2Bg1ByvSmGvuJVZ8HtW7N99uNvWv5aXiisr1ltaJBrtUZ2xY%2BNANnIXwxQY1XLxpyxOLZWGuCXuzz%2B%2BTHHaKJCalfyPjd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78368c75696-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94187,"size_decoded":44561,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cabf5a6798388bba301c4f11737e900b","sha1":"6520aa0b76e64af3352be583a6c132a9ff343f97","sha256":"f2dacdfb25093fb7aef311ca21f74029249de91e3a01281981a054982810e61f","sha512":"9087f527d73c4c2edcda872dfb7ff5e82997e757b6b218fc1428e23685779c44d6bfeed0bdda47680cc4ea13c37e275c9b35dfe79373f68033fd157703747d2a","ssdeep":"1536:vPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:3N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"e393102a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-09-23T10:56:20.472788Z","last_seen":"2026-07-22T10:36:34.52619Z","times_seen":55,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/magic-lamp-hd.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.294Z","timestamp":1784715021294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/magic-lamp-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/magic-lamp-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedxbxgz6b7b\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdTjUcM3JWA0kVLdnzr%2BJWn%2B%2Ft%2FFSaRiqtLf0bqi49Ylmix88OFVHCb4JfhBSEDrSxlVmV2LQLxt3o335Om%2BI%2BjXrhXxavlKLs8lgawJVVaEyjD%2BtbF2zJ2hr%2B5L2K%2BAocYmu0p1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b015696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14519,"size_decoded":15547,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"a2d779ad526a8b1b2af0404cf7b77115","sha1":"887cc24bf11e7cec42a6c61b0a006c242c86df68","sha256":"3378bde2252242f5cfcce9b4c1cd410ffbc625381eaf8fdfbc905e55bc835278","sha512":"de0da239c3874308e813f4ae5b03265c7080fb45972c719e1db793a2990ed8c79cab413026385549a3960cfde23769c034be9efe2790f9e128b34f4624809300","ssdeep":"384:Lz2jnw7qIgkFL4wKLSKYBrkjSnB8qGCofuNpTV:Xiw2Mh0oIjW8n2jV","tlshash":"5462c071104e6c92bcb33a361b910110f75cff1423958b7568c15c89be4faf2c5a5376","first_seen":"2026-07-16T11:27:37.58877Z","last_seen":"2026-07-22T10:10:48.011263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/diamond-queen.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.309Z","timestamp":1784715021309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/diamond-queen.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/diamond-queen.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedtmkjfgkp5\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJEM77808fYO4a6LglOroMPlKwDanUxM3ceFc2oSLkaSvpR4w7joty3vKSZgI2MqeeqOr3hhWE7B6dQeGomVzSewrsM0MZO6cpVgNNS%2FcTw3Kzmb2u5kSocFHmxlV6QyT1gK8Lpx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b32b0a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26825,"size_decoded":27837,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ce904fa40ca855b0cd1720d119272599","sha1":"4a8647fe04846b9bacfa9dbb9c064db000bd149d","sha256":"e2c8837f2c8095b81d0148a3ba8197e57282a68cf5d5d7641aafdb2f22f5f643","sha512":"6d9ddabd1119d0c76fbb78cd4689debecfca4f2bdec3ec97dbe56bcf99005247552e0f4a936c6b5968ed5440a5b89f96f8a87c9f4ebbb68a0fe924e19891dbc2","ssdeep":"384:mhQUebJZWf3PdGoCWBqNYMw1MKbisAyB+U2JKo3HOjDF/oWClL7WCkZbH6BVQhTn:pV4flZ/clw1LuU4H2hA9LeZzKKtYm","tlshash":"79c2d0760bbb3dd0d9dc19321e2eca7dae8afba901d0af174ef467045b711105a82b85","first_seen":"2026-07-22T10:10:48.013317Z","last_seen":"2026-07-22T10:10:48.013317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/lucky-ladys-charm-deluxe.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:28.302Z","timestamp":1784715028302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/lucky-ladys-charm-deluxe.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/lucky-ladys-charm-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\netag: \"dhcvedx760cmlwl\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRjEUT2vOAK9BLrajQi7Fg3ludtffHwd7gEXKO%2BI24v9Umo33AEm1mkQ%2BSs8MHgHF%2Bu4tUefAEsGnxHA91TULeWszl4CBrqz9e4FDpqCDv4OJWomhUhHSVHA5tRCbf8YmPlRqj2I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7dedcd25696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28389,"size_decoded":29416,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"b8b1cc8830be68de7868aca5a591248e","sha1":"347884115857a052736a90d4e7d53630791d97d5","sha256":"fd6359627a23886335cd8aa37f31ccaa1a4b6d2de08fc328be44bea113e99f60","sha512":"8d2cf4302989aa919365ef550e91c515608ead9468cae0f17f4b9a118c31829fa807bdadbf66099bc30d344e9514b3fd2421cbb87f898804878700e257fb29b3","ssdeep":"768:LTNGIE67YfY1t3+dfNb0txUsbaOhjFYQiZofZ:LT17YfjQxUQVhjJaox","tlshash":"c1d2e1c0c3322487fb398033164f6c567ed99e19bad9a96d86900a3c1b52e5247f37f1","first_seen":"2026-07-12T15:18:43.848231Z","last_seen":"2026-07-22T10:10:48.014578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/jungle-wild.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:39.260Z","timestamp":1784715039260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/jungle-wild.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/jungle-wild.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:39 GMT\r\netag: \"dhcvedwv9cs7qc4\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oA4tniBdj1XWOsKjXg98VZ43xZ8kS31%2BtlciKqRHVY6ZtxwthVVeu1GnUke8yI8shflBhdjK9EQd3iCfmmH6cYt%2B47LUj3MH04%2B2h5V7TwCSomXxEeCzA8csuX3YSGfn3uzGX%2BcQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a8235f945696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T16:50:56.042754Z","times_seen":17480347,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/zany-zebra.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.574Z","timestamp":1784715013574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/zany-zebra.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/zany-zebra.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedzwsz74jvr\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QGanRHzV6HA8yW5L%2B3q7%2FePS9YqflcnLFPTCHLzclzdoVllt951pSW9L0bIN1vm3EsM8wnj7LVIIw8NZP000e4fzNOomNfmO9iQHL%2FxVSNW9fV1GyhSbQ%2BpB5mIHN7uNOX4pekt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782d88a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25767,"size_decoded":26791,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"faddc0f8395128039bc3ab0eb30fff77","sha1":"497a6e2700dff2e48b2acd5e5195807451a21282","sha256":"5d8dd8581210d2e2867ea7bd2d49f2e64c0c076b28ece2aaf59e296de674efa2","sha512":"56b9685259b10ac37613872b45e46263574316b996faccd8e1911f1fb69c9384e4e3c540c3998b343af5ee0c512305d73fabea38b77bd5ce9a5e046df00e89a3","ssdeep":"768:q9Bmp4R6Yhc0QJDWEfTtFXQY1W/zlGbpPReDKG:cQ6RZhc0QBWE/l1uGFRe5","tlshash":"70c2d08a746cc146cf2d5f36cc039e4a9340def4a695c1bff606ae71635e1b498e01ab","first_seen":"2026-01-12T23:19:23.781434Z","last_seen":"2026-07-22T10:10:48.01593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/snegurochka.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.590Z","timestamp":1784715013590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/snegurochka.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/snegurochka.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedyl6cxiqqr\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjR9SHfT8j1%2BQpFERG9X6YodZR5C93YszsJ%2FH%2FiqUxC%2BhRyK6tzImXPhtsNtyVBtvZXONsi9TgTxXpCWS1SmhDVw8bJQZipXAFEbzVfG94JBCbVtnV%2B5%2FJATirTmYzhMFRNs9ODi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a782e8945696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34659,"size_decoded":35688,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e82315a19ab83699a5d6a28c48963198","sha1":"af17d5577994fd3ec29730b9aecb31151e7dc9c5","sha256":"6041b8843752b330a0d5834896b83def5e635714e4cea5354865f7972ed3c564","sha512":"418d7041c012bb5f3bc8f3066b3ab4c0f18ef0fed19b1777fa1fd7b959c69ac9322dcfe49f0c4973c8e3ec9e953738e421b0e1413722a45a922b6a83fb8587f9","ssdeep":"768:Si/Mj14HCUg/PqM6JKo9mkItXbNpoqKhnuORyZFdCRwstzC:SiU5gM6JKHkIFdenuKyZDCRtg","tlshash":"22f2e15a77af5dc5f88de032a884426642fc007155ff036e4ae7cf7e675e8129a1806f","first_seen":"2026-04-09T21:54:52.132295Z","last_seen":"2026-07-22T10:10:48.016426Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/creep.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.597Z","timestamp":1784715013597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/creep.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/creep.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedmy1ps323i\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzYdNJBdmDWry%2FnFxUKUaYY7l7zAIMV8J0EKpfIFIJC8CmioS%2FTdte3lpzt%2Bk39a4DibSdkBt1qFZAfkJpexyDbr2WFXaslgdCHLi5H3wd3AbuhoGQDKzaXmLc%2Bcp8UfTmb04sF2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a782f89c5696-OSL\r\ncontent-length: 2561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2718,"size_decoded":3601,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a4e26706e46cc41872a41339f5728532","sha1":"dc6f75573630cd004e4bd08e5f4ae410a10b5e7b","sha256":"c12a64977c525c4e9eab7e2e6e3cc045da7293ca21af23f3f4303249aaac517d","sha512":"04d528775d67c4f87bfaf8ad66a1b26cf65c3f7435ba1027bdf9e63ba10a19afc7fcc70ac1bcab8f85ecaa465690675b55a203777104eaba4e37958ded9e4d32","ssdeep":"","tlshash":"26513c594b6acd02d07d1731c44d273116482b04ba7d766b2af95f7c13be1e5cac02e0","first_seen":"2026-01-02T03:19:50.871589Z","last_seen":"2026-07-23T01:00:06.723712Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-0.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.625Z","timestamp":1784715013625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq761bg-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LB5XvDwW58fFDEWRvOv8a%2BfSDerFOfJ%2BYTjRfLzz7RS%2FFtgc3nd3V3ycuIEJRRtI7goWc7NQS8cTkp7mYxIYeChvZhOXI1v2MCn646oQzRhMj1IP2HbjoBphdGZ5lc80m%2B4cMuAC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328ae5696-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1708,"size_decoded":1751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-23T03:06:56.990954Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/winner/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:27.873Z","timestamp":1784715027873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: fr-FR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"659\",\"154\",\"21\",\"930\",\"370\",\"529\",\"533\",\"235\",\"770\",\"600\",\"311\",\"613\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LeeGQyswi8UNmM0t2kFCvVLCXvgpH6rWlW%2FRLJQshFeFcxMeU%2BteApo76qT2Mywttiu7qg6O7TSt1CN06o%2BWf9KpcBYlN8FiTJj9MGSAQAZCR0mwCYCBdeUL1mzSWvun53DsLJSh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7dc2cb65696-OSL\r\ncontent-length: 229\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":578,"size_decoded":1212,"mime_type":"application/json","magic":"JSON text data","md5":"1ce73ca55f0d26e6f25e041097bbc9b3","sha1":"17312979e53386025cea129812a101032440e4ca","sha256":"400d78bd3089720492f32385e60341853799206cc902e977684d479cf5535373","sha512":"b18f08f2e6a349d6e9747af90983ee3dcf40e949c01dc9133294e3c3f2f4bb39e97edc7aa1fa475a5e97cfd0c7766cb757bfdff678a090152098dc94fd2908b6","ssdeep":"","tlshash":"43f082566652a73fa18310d0ec77efce1444e862552d8475fcbf1991c3225142f9870c","first_seen":"2026-07-22T10:10:48.020166Z","last_seen":"2026-07-22T10:10:48.020166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/vespa.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.607Z","timestamp":1784715013607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/vespa.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/vespa.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcvedpgjhos5uj\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 332\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7qIy8uW6t3fB7BxY4g%2B8ZmC9qEQc4JdsheECWnjR7OOYbM%2FIps7%2FtwTRcsqNbU4ibxOPMa6PMAOjoln56dFcVSPJ2IqNwg9n31%2FQAtnHvO7R%2Bfgrgx76AV8VSyX58DMlAwW4uD3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a783089f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7579,"size_decoded":8602,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9c248b0ab0b5f48360cbac3f5bfefb76","sha1":"f4af87444ea40b3e01410f0340432892c5ea1895","sha256":"99acc45962e470b7afd961372681261235e037f823d35c4866108203b27b56fc","sha512":"0c28e39fd5a9425e4984f381c1f1de7f6099929a8164e4e8f2944a0082b124e285f72a9cfe19e48ccf842e43fbee344a038487e3655fab5e9e55624d3a9ac286","ssdeep":"192:q0DUet1j+D1xYpFtyyzapVqT3iE57gReAeWRStGSqR+mdRxhP7+v:/DUUyD1xYqpVqjSc8SzQfy","tlshash":"c0f19f677e14480aec6f997af1558e4e43509adb272a330f7d51dd0f03bf605072a725","first_seen":"2025-11-09T11:22:30.334396Z","last_seen":"2026-07-22T10:10:48.021667Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-2.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.628Z","timestamp":1784715013628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq76164-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aykm95T3nIhCss8batg537w8MjsrMmgReTK%2B4p669uUZBwI6QIsMDfGV6d3cSlgRKEEZl6OCqHyxu182CClDdlYZaSyxZNbblLeBiL%2BBKSMuwDmxBRoI7JHmhmh%2BHqVVl7irG%2Fd2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78328b05696-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1813,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-23T03:06:57.173272Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/crusade-of-fortune.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:33.226Z","timestamp":1784715033226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/crusade-of-fortune.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/crusade-of-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:33 GMT\r\netag: \"dhcvedtanvv1kpy\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEDTfDXllG7YgyqGD38IXn0%2FAvWoMjvouWQDsxxQQQrNoKjrWM9T0HvOl%2BnPmXhtFCdiJk%2BTKLf89Muxkv46XM0QvsDnfMwgI4eOMfntHSYxGXExQtKO%2FOI4tuzVQlzJdKSgODAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7fdadef5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26854,"size_decoded":27877,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"87f5067e93740dcf047adde7280e0b9b","sha1":"5a75ea12f79f661d87090c9f9d6b3be52754b793","sha256":"b8cc0de81f05e78970c0e21b98c3550b6d15cee7c764fd8fe753eca490bb319c","sha512":"ad1b9b8c5eff5b7f45888562fa4faa515a81da243f79931484a5c340fe1c1fbb78824878951d6197fd4ce68df3c42d7209679d0c7ec970083f5f78585693c3ae","ssdeep":"768:kVLv2uJRC7IXkSCX9/qGJz9oMs+WbcoCm4xtDJDsh:n2GIXOX9/qGds+ux4vBsh","tlshash":"58c2e1a46b775f83fc6e1be58515279e7f0665b5b520962d0c031c434fee056c8fc0a6","first_seen":"2026-07-22T10:06:57.564097Z","last_seen":"2026-07-22T10:10:48.025189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/sunset-delight.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.303Z","timestamp":1784715021303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/sunset-delight.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/sunset-delight.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedyupa6mf7i\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oki4ZP6cZHxgyJOQJNGkzlWst1DMcBp%2FOHkc%2B1nej0wIKBF0aUQdhBhdrHAmlc8IrvWAvmeuAJ%2FztvyUTQh%2FL3yAeJzKyKvuvD%2FO4TPLNoCYzGDjfTYObC1vYTdyY9MjbqTmr41c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b31b065696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19710,"size_decoded":20731,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2e8a0fae2042a07affcaeac0b0b356e0","sha1":"aedfc957ced27fb1be150f3b2e29404501e228db","sha256":"e344c564b8ce39f8e07b6454717c3cac16ec186a0ac493892d8b5aa58b111d88","sha512":"c2877dbe4b0f5561f77aceaa8c5940b7355f9619071da993ca14a3fba43423552172af1beecd2bcc8a23cec4bc0dda90203ebcbeed8ef1798f232cea5da67338","ssdeep":"384:HAC9QH6IHl6r21rPDxu0QPRVpbt9e1OcNj01zfAvHv1ZNER7jgrtfRh:HurgpjP9Z9KOAAhAvvHN4Xifr","tlshash":"1992d1ac5f4614a4b33fb1b932591373a630fec99bb5de221832af6077596f014b06e1","first_seen":"2026-05-27T18:32:05.350722Z","last_seen":"2026-07-22T10:10:48.026265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/hot-7.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.311Z","timestamp":1784715021311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/hot-7.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/hot-7.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedw9tryojnc\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjnjHF3pnKoADDZr6b1aVKeD4osgDA8a6RepLW63t9P6UKloXxTwCb4xa6HLFFCitsBth9ALDQT4ZtoEGJNecV5An13eN5F%2FLrhOqdoCadl6o2DW4zjng4WWBbmQIuvWrz6bbWIi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b32b0b5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25464,"size_decoded":26468,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"eaf7ce2956254179016f38b81fd7b912","sha1":"b9478e6418bc5f95255762dfd4de971880c663a3","sha256":"f6909df238ba971591a9514e7807536dd909d199d7c1d09a6f89c7ff1cee0b19","sha512":"5ebff286e0585893159dcd5cae989b8dfe4b5f81cb100682bd2237e08a39e9fb4291f36c49d04522bb8e3addb4b951d825c54ab9a3501cb773c16c28499e78df","ssdeep":"768:Cl87LVAxqdQkxiQVSUUETL0szkrpjxldH:CdxqdFx/VpUEHPMPd","tlshash":"63b2e0916ae94ee5fa4d5172a0183f2afc92ec7f4c14ef2c04f840a29f76c66c55913c","first_seen":"2026-05-26T07:00:27.047165Z","last_seen":"2026-07-22T10:10:48.028736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-9.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.642Z","timestamp":1784715013642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq7616g-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfnYLbkvObQCmo50POhIvV%2F7kFbyVhFB1Mrob5%2B99IxcuuYZgNYcLtWlNH5rs7lM%2FO4A5rZYXWqUCVoYf3fBLybp32hbmnjoZscST54jjwt%2BkgDCGUGoa23led1zuqOgTgUS2hF%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78338b75696-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":1574,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-23T03:06:57.144105Z","times_seen":73,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/close_icon.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.662Z","timestamp":1784715013662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9kzzvw1ih-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5ekr1YNWjIRqLMTDRrKLWUFaOd%2B3FZW%2FHsZs42fvVHkjH3RYQUJ3fjkgs9TK%2BDBOV3D1h7FEQ4bJsjwUgyoHLM%2FdNcwWIllR6C%2F7HmwVHA3FQgV6OTIhxzXK%2BpylG%2FS%2FYO%2FPIQc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78358c45696-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":1889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-23T03:06:57.015081Z","times_seen":86,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/ajax/game/","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:19.829Z","timestamp":1784715019829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-fr.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"155\",\"1448\",\"2215\",\"1677\",\"655\",\"50\",\"713\",\"603\",\"1264\",\"118\",\"1353\",\"2452\",\"1683\",\"619\",\"2023\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 22 Jul 2026 10:10:20 GMT\r\nexpires: Wed, 22 Jul 2026 10:10:20 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1NcTKUHDJBYF2wZf3tFStA7aEzAgLmnOuS2ih3yyLYcg%2F%2FgsAo%2FAcSbkODQah4GZE2of%2FAGN5fj2AYaRwb%2Fz9gS88F9rOjW9m8YAebQJqkiZa1i3xba6binHHX1e%2Bih%2Bc9Wk9lD\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f1a7a9ea7a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":1042,"mime_type":"application/json","magic":"JSON text data","md5":"8f35aca774084fe95bac71b2afa9e1b2","sha1":"784b1a10637b5c74460023a6d71310c010f60c15","sha256":"ee3accb6f277bb43bfda38fb9c0aaa1962c977da63e8b3430b230df34629798e","sha512":"0bc4b0fb2538aa941f4c1d87eff088567ee2f2377053d68bf56edd7850dc29d991a5509c610a30441f10ff2ec7b15c940d995023ee95f7a1423d1f222bff7b62","ssdeep":"","tlshash":"45a0129580000c6d31333c0428c63190146c0ec360a24c1092849d800a685060003c14","first_seen":"2026-07-22T10:10:48.034192Z","last_seen":"2026-07-22T10:10:48.034192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/big-top.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:21.305Z","timestamp":1784715021305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/big-top.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/big-top.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:21 GMT\r\netag: \"dhcvedr1p17ihx9\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jJ37WfbIJbNUR40u45YhxXHbyPgi2Ic9%2BSkAEzK%2FJqLpSIKp5VzkSvIdQyZ%2B8wmwLVeUbs6CHlhl6uwbOETAhWT3LiqYYAjbHN2V84MLX3OWORm9Ts4x946YjSiUOyP0o9Px11%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a7b32b085696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23229,"size_decoded":24241,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"06819677bbd5d5f5f86076c0e66c4c35","sha1":"69d76036702186232b786e764f4220495e8c7ccd","sha256":"1e8e1f2c638cddee10651bdad949a733060d60b264b37cf3ce72ef12c75b93c3","sha512":"8cdb9ac5f15f9b590c8bf080f1e6e5af7286c1e4dc83484258acf3ab5031e3ac0fe4fc084015df4aa842a0da1526ac42f59c29e0dadc55c4a702616bd119c108","ssdeep":"384:L8WDFRH0b4npilUBLkPbI1uDktmZn7KnK4pVF3/ZI7I5S2Ho3EZKDn3F4tMkvb8X:osFRUb4ngiLkPYuDktOK5F3C7YBIUcLV","tlshash":"3aa2d01abf978d26750e0d3503b10269d746563017f208ccb16aa7c81bfd668e9cf336","first_seen":"2026-05-04T16:18:30.895116Z","last_seen":"2026-07-22T10:10:48.036112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/avatars/vanity.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.266Z","timestamp":1784715035266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/avatars/vanity.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/avatars/vanity.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedpgjhos4zw\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OYH01gqD0kn2fhuSex7D83735V2EbS6vcznwi49PPPQ3HrkYAXd9ZulC2G4oWrg5WrdkKrA0GvAmaJ9W%2FTkIHqahMWA%2BpFp8Xad5Fv%2Bku3bHIHj24FYys7%2Fyp5AcOdaIFFVvbrf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80a6e855696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6476,"size_decoded":7489,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"1f9841bf47b09fb2db1a256ec20a04a1","sha1":"7b696149db59487100b0e820fbd45e6f71683fd7","sha256":"0253bba9e159e40f3e465762d9cb11c870f4daaa5a2a6b1627c505facdec483c","sha512":"f38e7d3c7ecf10a5156a5efd2733546bc9074213c1d268471014edac8bae19daa38d46e34a71b869c0b7d12bfdf65e99a115c89998ea1b582c35e8f4794f4f1d","ssdeep":"96:rsfDavbJjI0+SojYnt8dnahH3HY2KRjF5jOF5TUQyHNUUwScSTdZVCqK++1oG:rdTJc02jGt8EhHXVKHgYQyH9/ch+coG","tlshash":"b3d19d0b6bf44b52f82f83384121d8da52c4e701359785b67289e6c0bf7a2d0bdeba01","first_seen":"2026-07-22T10:10:48.036862Z","last_seen":"2026-07-23T03:06:57.086387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/uploads/media/games/beowulf.jpg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:35.309Z","timestamp":1784715035309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /uploads/media/games/beowulf.jpg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-fr.fr%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/uploads/media/games/beowulf.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 22 Jul 2026 10:10:35 GMT\r\netag: \"dhcvedqzbaw8kmb\"\r\nlast-modified: Thu, 26 Mar 2026 16:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQwCW4lh3gpsUo3FV6RfKXdoz8qksBodK0xg%2F3xiSwYyf0CqwKG3Z6yf0%2B%2FvzvRY9j8puR3xlMEJLWj5Q%2Bs3%2B5TVT6yUihAY9mG2bdDEaK%2Fjb2%2FLAIvadswMo3QZvdaTa26JJ8he\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1a80aae8c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26723,"size_decoded":27741,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"a740c4d570af22e3022dfd5025797038","sha1":"fc80b184a02eeb3680f3dd8cad36df245e2a2a28","sha256":"0b09cc6c9924e640d985a23980fd018bfe0066f2da9878fb5b1776013345954a","sha512":"49839ab6dfe1207f5af384ad74d21260836340691bc3d9fa6c530d665936ad0ef8e7f7c965d16fa508b0402887256ec5551f4869c6cbcc84c280faa88f282b0b","ssdeep":"768:jeREyCIsyOMXA4OUqn3agGrR8So8V1U8P+1nvPxYn:iCyvsSXMUqKgG3o8sT32n","tlshash":"6ac2f19239e0b848e69dfaf5324d16013b155b4e2f9c13d7988507a93e9a0fe2c5ca1f","first_seen":"2026-07-22T10:10:48.041387Z","last_seen":"2026-07-22T10:10:48.041387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/live.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.623Z","timestamp":1784715013623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/live.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9wwnga1bg-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dT1%2F%2BPEhmushcw7JObaI5ILOXxHFZqOWRT3y5aZP0dqzxqIyvJt1zQZt27mdlvzwTkAbAFZo3jwUbLq4OYZWOVsEklFNItSLM6TzZRij%2Fh8zhJKB595JrJwYO%2BjBKiQzvsUvyU9G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78318ac5696-OSL\r\ncontent-length: 783\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1708,"size_decoded":1807,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"424b692dbdf804909dfa0f0e05875db3","sha1":"035533bb122a899b689c3c92ba852f1cb6d5aa3e","sha256":"cd67b8fc999babe3806e7104c2ab4c2290a7fec77cad61194596eb71884107de","sha512":"54c63fd0ad9e267c765abcbfe7127547e818329b17ef31b379a23141da7024aa5d843010f2d4c517bf3d336cb512d33b8ea2b8032fd6aab8c3e222ae8ffca3a8","ssdeep":"","tlshash":"043154f6636433c8d887c769d696be66333718f4372286c84be82a64cf61c8d5d54c93","first_seen":"2025-09-23T10:56:20.356068Z","last_seen":"2026-07-22T10:36:34.62656Z","times_seen":39,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.550Z","timestamp":1784715013550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 24 Jul 2026 10:10:13 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjYSy%2BcMvii5FX36n0M1IhE0E75HZjMjaRnfA48pKnjhBf4mGz64MRQaeywTM4C%2BlSr%2Bj2EN7cc%2BlcSWcoiNUlwbU1Cg11YlltZo5iHC%2B2Md9yrLSeWePYAirrjjZKDGcZ6195pZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\nserver: cloudflare\r\ncf-ray: a1f1a782a8805696-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T16:49:17.055332Z","times_seen":404433,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-fr.fr/svg/games/table-icon-14.svg","fqdn":"rainbetcasino-fr.fr","domain":"rainbetcasino-fr.fr","tld":"fr"},"ip":{"addr":"172.67.186.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-fr.fr/","date":"2026-07-22T10:10:13.650Z","timestamp":1784715013650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-fr.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 16:08:30 GMT","end":"Mon, 19 Oct 2026 16:08:29 GMT"},"fingerprint":{"sha1":"43:74:DF:74:0D:37:C9:DB:D1:F1:50:D9:70:BD:FF:1B:5F:ED:78:F1","sha256":"66:61:D6:AC:5D:20:E6:7D:60:32:07:74:52:94:82:AB:82:F9:9B:0F:D8:AD:ED:31:CE:99:15:1C:E2:39:E2:74"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbetcasino-fr.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-fr.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-fr.fr-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 22 Jul 2026 10:10:13 GMT\r\netag: \"dhcver9ndq762nr-br\"\r\nlast-modified: Thu, 26 Mar 2026 16:56:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmllU%2F%2B%2BSK1YAjKunfqr%2FWEbcbWW5ezpQIT%2BoRTIdbrvULOKGwYOOgOPoiawHcuARLPc6rCxRFPHfTB38yrX%2BLuXkf%2Fkatxs8B44edrdIwMs%2Bam2a8MJlsMLD0o1jRPaqyzhUOwi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1a78348bc5696-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2423,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-23T03:06:57.116959Z","times_seen":73,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino-fr.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}