{"report_id":"8ef0f1fd-ee05-4c6f-802f-1c2e06d76244","version":0,"status":"done","tags":[],"date":"2026-08-28T14:37:45Z","url":{"schema":"http","addr":"rainbet.net/","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.47","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rainbet.net/","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"title":"Zaobet","dom":{"size":2088,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fb54346e868fe126fb44da37f278451c","sha1":"8762bfc3608e3e416dd5e4bad928be982939fb26","sha256":"a2fa378147e52cf90527db8796ab8456caefcfe884f30adf92a83e5120ee0d9d","sha512":"feaa88df2547b4b7504b23b49983ba2dba2e83ebf6189e27c965f573aa5de73056c9dea23e954228f3091c0492d03c54ebdd2dc3178d09df73848b6b4de791e6","ssdeep":"","tlshash":"a2411093afa5882a223091549ad7f458c856e047c6649c20f6dd01de4fd2fa3caf313d","dom_hash":"domhash644be46c658df95409dad1a4382d158d","first_seen":"2026-08-28T14:07:11.673153Z","last_seen":"2026-08-28T14:37:47.178698Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet.net/","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.47","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:37:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":509042,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbet.net","ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-10-08","domain_rank":0,"first_seen":"2026-08-28T14:07:07.525246Z","last_seen":"2026-08-28T14:07:07.525246Z","alert_count":12,"request_count":6,"received_data":13510,"sent_data":2829,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.net/","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f176b44a4bbe0dc2b823be4d2fb4fa","sha1":"97ee937f5193e36e12af54c1a0ff10acd4ea35b1","sha256":"7a28b4c5120a3f17a2406b71ec0274dd8a314d8959bb17eeab5929248b31d141","sha512":"86aedbdb7bd91a969476ba4b512d85eccc3ee598aa05b7b2ba81fe69d40b676a92b4e16f2e0470b6ec262447d297a7434fce7a2d8836f5adec7479c7fd21ed19","ssdeep":"","tlshash":"75c08c8c264b0c7081ab3a498bbf7204b019611360904e20380ea344df20e279744814","size":191,"data":"","first_seen":"2026-08-28T14:07:11.677453Z","last_seen":"2026-08-28T14:37:47.182415Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2Z7GWRK4Z6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86259a830754a6cbff32167191cffca","sha1":"95705a9e79ed07875933e42edbafd916717582f0","sha256":"fd701153f46fd4f25ee79614c9807041d09bbbd2c3a566cd633aa163f0ea75d0","sha512":"270e48bcafd45ffb069b2caf53536bf730a0193aaa7f3c4d8ae0f933d37b747602d69358a33710485ff49b7a5f108e57200a0b95278c822c0d6efccbe66a9c44","ssdeep":"6144:ZUq6NcAuG706mInkRDuccUQ/xEkY3UchfEvO/iQcYk5P07SwA:Si1zPIUHfEYiQcXM+wA","tlshash":"56b408cd73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4277f7c","size":508438,"data":"","first_seen":"2026-08-28T14:37:47.179438Z","last_seen":"2026-08-28T14:37:47.179438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2Z7GWRK4Z6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.189Z","timestamp":1787927838189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-2Z7GWRK4Z6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 14:37:18 GMT\r\nexpires: Fri, 28 Aug 2026 14:37:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 171663\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508438,"size_decoded":172267,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"d86259a830754a6cbff32167191cffca","sha1":"95705a9e79ed07875933e42edbafd916717582f0","sha256":"fd701153f46fd4f25ee79614c9807041d09bbbd2c3a566cd633aa163f0ea75d0","sha512":"270e48bcafd45ffb069b2caf53536bf730a0193aaa7f3c4d8ae0f933d37b747602d69358a33710485ff49b7a5f108e57200a0b95278c822c0d6efccbe66a9c44","ssdeep":"6144:ZUq6NcAuG706mInkRDuccUQ/xEkY3UchfEvO/iQcYk5P07SwA:Si1zPIUHfEYiQcXM+wA","tlshash":"56b408cd73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4277f7c","first_seen":"2026-08-28T14:37:47.179438Z","last_seen":"2026-08-28T14:37:47.179438Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":44,"receive":50,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/assets/index-zBon6J3E.css","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.193Z","timestamp":1787927838193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET /assets/index-zBon6J3E.css HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: 7Q1bgFNRp7ODRT4ZhFuf8epX9tc7AOz51-kgYd1PkZnRF6CfHjfijw==\r\nage: 17099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":1305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"abe862b84eb2627d9570b48edd69802d","sha1":"543a707c635e4f8a8dcbef0d13aec9afce18c1ab","sha256":"0d71f1e6210394eb87ebedc1e33f5d18dbff7028464bddb089f5593a8fd52b1e","sha512":"3702ebf7bd469bb0ba7c34dd531c33ccdec007a2da23dac7adac725db21f5d7d6d737a023a33f38f6f1f665ec29d9d14a9df33b8a75503001c698dd7e9c2522d","ssdeep":"","tlshash":"7f41ed839fa58826223091589ac7f048d956a187c7649c20b6de05ef4fc2fa2c6f3139","first_seen":"2026-08-28T14:07:11.674863Z","last_seen":"2026-08-28T14:37:47.180411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:37:17.494Z","timestamp":1787927837494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: 9vZEjpQPm7R_U8bDCYeTT1YMdBlKkLkIyfdBzkRZDl5pKSc_3Nwffg==\r\nage: 17098\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":1305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"abe862b84eb2627d9570b48edd69802d","sha1":"543a707c635e4f8a8dcbef0d13aec9afce18c1ab","sha256":"0d71f1e6210394eb87ebedc1e33f5d18dbff7028464bddb089f5593a8fd52b1e","sha512":"3702ebf7bd469bb0ba7c34dd531c33ccdec007a2da23dac7adac725db21f5d7d6d737a023a33f38f6f1f665ec29d9d14a9df33b8a75503001c698dd7e9c2522d","ssdeep":"","tlshash":"7f41ed839fa58826223091589ac7f048d956a187c7649c20b6de05ef4fc2fa2c6f3139","first_seen":"2026-08-28T14:07:11.674863Z","last_seen":"2026-08-28T14:37:47.180411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":98,"connect":118,"send":0,"wait":119,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/assets/index-CK3CS14W.js","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.191Z","timestamp":1787927838191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET /assets/index-CK3CS14W.js HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: KDUlLj3i3IHBN8pUH_i_6a_uvZ6X7XEL_ddGNT1OuaLYJBOoDU0C7g==\r\nage: 17099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/assets/index-zBon6J3E.css","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.192Z","timestamp":1787927838192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET /assets/index-zBon6J3E.css HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: h6q9q_euwqVpsQFMGx5BgCo69k7h1fnJTgDG4p2D3QeqSTHDh_lEjA==\r\nage: 17099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2102,"size_decoded":1305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"abe862b84eb2627d9570b48edd69802d","sha1":"543a707c635e4f8a8dcbef0d13aec9afce18c1ab","sha256":"0d71f1e6210394eb87ebedc1e33f5d18dbff7028464bddb089f5593a8fd52b1e","sha512":"3702ebf7bd469bb0ba7c34dd531c33ccdec007a2da23dac7adac725db21f5d7d6d737a023a33f38f6f1f665ec29d9d14a9df33b8a75503001c698dd7e9c2522d","ssdeep":"","tlshash":"7f41ed839fa58826223091589ac7f048d956a187c7649c20b6de05ef4fc2fa2c6f3139","first_seen":"2026-08-28T14:07:11.674863Z","last_seen":"2026-08-28T14:37:47.180411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/apple-touch-icon.png","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.343Z","timestamp":1787927838343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: 7hQ7Ptx2bR0p4r5EvA1PECY_TLH_0ybw8MjzGA_ni6wpUwycddtSXg==\r\nage: 17099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":1305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"abe862b84eb2627d9570b48edd69802d","sha1":"543a707c635e4f8a8dcbef0d13aec9afce18c1ab","sha256":"0d71f1e6210394eb87ebedc1e33f5d18dbff7028464bddb089f5593a8fd52b1e","sha512":"3702ebf7bd469bb0ba7c34dd531c33ccdec007a2da23dac7adac725db21f5d7d6d737a023a33f38f6f1f665ec29d9d14a9df33b8a75503001c698dd7e9c2522d","ssdeep":"","tlshash":"7f41ed839fa58826223091589ac7f048d956a187c7649c20b6de05ef4fc2fa2c6f3139","first_seen":"2026-08-28T14:07:11.674863Z","last_seen":"2026-08-28T14:37:47.180411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.net/favicon.svg","fqdn":"rainbet.net","domain":"rainbet.net","tld":"net"},"ip":{"addr":"54.192.100.63","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.net/","date":"2026-08-28T14:37:18.345Z","timestamp":1787927838345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Fri, 12 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B7:3D:F7:A7:AA:F5:02:AB:BA:88:BB:93:D9:1B:D5:69:0E:EA:D0:37","sha256":"93:3F:4B:70:9C:0B:CF:DC:04:75:07:2B:5B:4E:A4:D5:E6:07:04:38:2E:2C:F6:05:67:D4:2D:57:00:FF:30:18"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ndate: Fri, 28 Aug 2026 09:52:20 GMT\r\nlast-modified: Fri, 28 Aug 2026 09:43:01 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"abe862b84eb2627d9570b48edd69802d\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 69e5fba7c1fe854e243ae24a6b2b22c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: MCI50-P4\r\nx-amz-cf-id: B0NK1E1byhBfN0b0BFGrzeUIWVv8Ikrg0_2xWm2BHgylKkWhOkjnYw==\r\nage: 17099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":1305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"abe862b84eb2627d9570b48edd69802d","sha1":"543a707c635e4f8a8dcbef0d13aec9afce18c1ab","sha256":"0d71f1e6210394eb87ebedc1e33f5d18dbff7028464bddb089f5593a8fd52b1e","sha512":"3702ebf7bd469bb0ba7c34dd531c33ccdec007a2da23dac7adac725db21f5d7d6d737a023a33f38f6f1f665ec29d9d14a9df33b8a75503001c698dd7e9c2522d","ssdeep":"","tlshash":"7f41ed839fa58826223091589ac7f048d956a187c7649c20b6de05ef4fc2fa2c6f3139","first_seen":"2026-08-28T14:07:11.674863Z","last_seen":"2026-08-28T14:37:47.180411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}