{"report_id":"92264616-ddc3-4dce-8e70-a01daad3c302","version":0,"status":"done","tags":[],"date":"2026-07-08T11:57:57Z","url":{"schema":"https","addr":"rainbetcasino-ro.com","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"172.67.196.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasino-ro.com/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"title":"Rainbet Casino: Sloturi RTP 95–97% și câștigă bani reali România","dom":{"size":157043,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6633)","md5":"f5e7e0e5876cf727e03c590f49774471","sha1":"3a8464450798e3f13747362fa03f6f94a627deb2","sha256":"12c2ba0f2a3b8cb4e097010534509cc65b7a348ec067ac08cd1a0f787f29046b","sha512":"3538c7eb37cdc1d2930fa68ffa7bff307440a066fc3238cd10ad6c035740103a20873b076f07f2e53d433ebbcaf9fb76de277d56a0fe9b49260843a8c0df9483","ssdeep":"1536:xQrqLbFrVzDLQlxlL7sMaozjszR4SA9ksrovk2aVfLg0QRbFdzp:xQ+1rV3LQlxlL7NaecRPURVfqdN","tlshash":"8de396d922f019a7448382c26f222a5b3ed6d613c9464544f2fd8fe91fd2c5aec279cd","dom_hash":"domhash1b70f38400d7795b3199d8b6fb2deba6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbetcasino-ro.com","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"172.67.196.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:57:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino-ro.com","ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":226,"request_count":113,"received_data":3669472,"sent_data":63765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino-ro.com/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"333f303845d7c373c4f79d3f3792936b","sha1":"6ae4d2e14ac3d7faf710f9cce9c754f7c032df72","sha256":"090e91f23bd8144ff27ac1e60e10476962bd993cfe8b4ca9ade4fb3083651c64","sha512":"01848a7127f49a4cb5640d450b72178a3979b49babe7034beb0ea4b26d3a1aea630d3f8c47e1339a34f97d33aaa8f55b45107b14eb0ddc1d490f43aef9b808c1","ssdeep":"","tlshash":"4280000c020a0a8a228a228828c230808822888833320ae2028fe008020a08880e2820","size":27,"data":"","first_seen":"2026-07-08T11:58:06.262461Z","last_seen":"2026-07-08T11:58:06.262461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T23:29:42.055119Z","times_seen":395184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/runtime.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-12T15:18:43.827191Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/app.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-12T15:18:43.688768Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbetcasino-ro.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"ro-RO","filename":"https://rainbetcasino-ro.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"ro-RO","filename":"https://rainbetcasino-ro.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/baner-1-69b94e97db6e63.52254033.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.770Z","timestamp":1783511853770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b94e97db6e63.52254033.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/baner-1-69b94e97db6e63.52254033.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc9sfz\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w35kte3IraibX2uifwUpvRI%2FC3VdAEU%2BMmO2LfbJPPbjkWx%2B4z43AbHBYaNTwXDD0SxvFcRcX10NRwUQkz7qcsaVDfKr8skipKdSpDjdte7geevcLN0ABh7tJZ4xk3Oez6ZlsIk4dA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0223eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456767,"size_decoded":455292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"400b0599df6355cbc37a540424d3921d","sha1":"5f91ae8e4bc58ef4a2988a0f06efbd12e23d1d19","sha256":"a7b681dba1b2264ff0a6e6ab66fc45a9e584400e02ff669458b75a327120b274","sha512":"a0ee4b7c0ef27894db7345f96d0c44198e2c56abd2a26beb86547557251f8ca1f7833d511fa8e3629681b310d4a5df9056358b10dad8ad4f2bbd42a66cfccbb9","ssdeep":"6144:qyW0mX2GWryWhRPc07wr6UME7TzMhpt/MDKtuJ4I5mTg1kqA7w2lESV9qG1PYNO:qyc29hRPRuzMhpcJ4SQ7ND9q0YNO","tlshash":"eca42390ca6f837f3d6c1b72b55f2cc786551eaa39e0e69c823a7847011f5927293d0e","first_seen":"2026-07-08T11:58:06.135504Z","last_seen":"2026-07-08T11:58:06.135504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/karaoke-party.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.792Z","timestamp":1783511853792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/karaoke-party.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/karaoke-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgtatnkemec\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbyuhcseyGaqHUI59jBGgV3%2Fr6CirVgOjPl7De6Ck6r7oKKLG01LcdPCOTie8qeD2rZjJmE%2FAeM6ZT0qybVNZ82DEwuclN1h1P1%2B%2F7FJbcf5cZTOXE5FvhzY1Qk34eIyrEEuL8ARLw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29028,"size_decoded":30055,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9d5a1f119af448a3defcb3bc9e223100","sha1":"35245f0498362bf25cf42fa00379221819878587","sha256":"75ba3d4758e6a737fd22fff8c87a90e98bae76ea1bf074ef35676559f3718b88","sha512":"79817ba9da2a0a3a4c56aab71307c6fbe16a87d979769e61c6b5af93a663435ec4bcc40504ff8f58b8c1be2ed065e4457e05d01ec5885ebb409f5e7831534c41","ssdeep":"768:4IeTcDmA+Uckw9j3Ud3l81X/U+KNcf9mFVvEQxyRZBUZ:4I5DznckwV63lGczNk9mFVv7yRAZ","tlshash":"a8d2e12e1fb04974db2d727219e1a3a3cb08ae0157116998d9b043b0939d529ffaff19","first_seen":"2026-05-13T21:36:15.908891Z","last_seen":"2026-07-08T11:58:06.136656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-10.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.819Z","timestamp":1783511853819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyrjppx29u-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhUD6Gbf%2FZ%2FfZakprL0Jb2ISF09hRg0wboZtQjxisXxWMrdUPo5dHj9ZFLyt0%2B1DLtBrF%2FX%2FhNVlzrg4l%2FlZe8Ar1SnazfHa6kURASCxIzxBjnijJga0u%2Fp4zMaIE3q4us5usFZQAg%3D%3D\"}]}\r\ncf-ray: a17ee97e5f3423eb-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2946,"size_decoded":2387,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-12T15:18:43.798952Z","times_seen":55,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/flaming-reels.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.834Z","timestamp":1783511861834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/flaming-reels.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/flaming-reels.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgql6kr6rb1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp1AcF327jsxTwZQ4%2B%2FmGPBu5CfduhHKEOoBEF5lxpK1eYSMAIyG%2BcGzqTmId4F4sqkW%2F1kU0od7tIpi6dFhHDj1LPmi958NkNKRZUGbdtYOg0oDhbL6Apl%2BpRBpLeSw%2FNodn0VgTw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b07d4423eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35389,"size_decoded":36420,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0d8fbe3ece31b8e5e5485af2c698604d","sha1":"aa039096a435b9b3548336fecfb5c11faed6e4fd","sha256":"0d3571b8f36581a5804ac4172395839756da33b2d1acaf65031c001f53c139fa","sha512":"23169bd2bb9d0ad43dacf1f4367a0504098cd98360b750d1868c45417d5c1286c72f44078fc827a34e6abfea13f9766d5b7b614d4dc7d6b63fd94061d50e144b","ssdeep":"768:4tp7B59IdkHXfUccA2bbAiiuV9gY+2gd+Wgziixmk:CpVrvUcN3SVP+Rd+WI0k","tlshash":"9bf2f1fe6bebd55afe0ac3fa35013e0543228e6bcf64974f1894b52c527cc45109919d","first_seen":"2026-06-02T00:44:56.48364Z","last_seen":"2026-07-08T11:58:06.13877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.756Z","timestamp":1783511853756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 11:57:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAUhd4wmpzUv4LHrYNsavHZgsLdii13QKRLzhHfYY3JiQ%2FuRhYCvb%2FHshTgsZh5nVZV70D%2Be7TMrt8a6mlpnpueJ5WE8S%2BxBXIFUKlKohp3tQAZEswBUHE8GpA%2Bzxr%2B9v1RRT3DftQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 11:57:33 GMT\r\nserver: cloudflare\r\ncf-ray: a17ee97dfefa23eb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1306,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T23:29:42.055119Z","times_seen":395184,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-16.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.825Z","timestamp":1783511853825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyyowy718e-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjAOffVsxuMifwQrwmOu2vlZvLrp3fGR0RYS1MAgbwLHPaXRNd06i39R84rr2ZAxabMZSYrrzCOMIBKfyghHC6gnrQxy%2B7%2BprqOPkFPPtRi5cP66nhOkC%2BZa9uHZMv%2FCP3oleOuOLw%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3a23eb-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":1788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-12T15:18:43.876286Z","times_seen":55,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/carousel-belatra-games.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.698Z","timestamp":1783511861698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/carousel-belatra-games.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/carousel-belatra-games.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgo2op68nls\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMICXlzYWBuNiaU4SLQQUHSPHdQBp%2BuJGUEhlMacAovKVxfI4nd698ukBJuXJt3Q9Ld6BPb5efJU0zaoS6nRYeLHro7SwhX82xwo834oSWpN3YEC3dITE9DR%2F%2F5X8GyLslT%2FmdS0IQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9afad2523eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30592,"size_decoded":31628,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2ab4bf4cf6a37b8682bd3e7f62d1f8a0","sha1":"a3d7b437dfa487ae536937b8607d54bcafe069cc","sha256":"3718f22154bc65bbb66c559adefa063248ae5068cf1f643a52e58e9b065c45c3","sha512":"5d20b9d31e9d5f86adab67d1dccab33e67586c51efd89aedd1f50a4197bda2a6b08c8a11521278759d134e62d39ec4cad1e42d505e9cc576b5c631ccc33cad85","ssdeep":"768:egcIFZXgRjurw48120lNit0Nq9WsEREyJ2Fxa:egcIF+JEva2Wit0TsE2G6a","tlshash":"5ad2e102f3ccae47d53952b51e84dd312231f3423da05e3ea5eb4adb9e08174ead425e","first_seen":"2026-02-14T15:47:19.006467Z","last_seen":"2026-07-08T11:58:06.14332Z","times_seen":4,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/app.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.760Z","timestamp":1783511853760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n560mspwzqo-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8IWzOVxVxKx4ql153MlIkhUdC%2FyNjeGerMcR4E3fjR0nPl5R8VQowzNcYIdYeWVDCLcdlBC8RAaLd%2FNkTnZ2gQw5jBlkJytm0fzU5MCxjW2cUg0m78TFjIQt3%2BEmmNMmNp5jfR2tQ%3D%3D\"}]}\r\ncf-ray: a17ee97e0efc23eb-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46320,"size_decoded":8796,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-12T15:18:43.688768Z","times_seen":12,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.768Z","timestamp":1783511853768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzzkn%2BMDwYDlovz6nYF4eXfN1v5fcG53495tIVhW919gZrM8AUGdLo50HX0wiVPkxYn4%2FDmqs66ycVGQM48SEBAzxLo1AOd8NFQdWNTpoWe%2FIXj2lY2xdg2AjsEUbsoPXoG84nTVrA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kixwl6e09v\"\r\ncf-ray: a17ee97e0f0123eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1188,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-12T15:18:43.513407Z","times_seen":41,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-6.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.815Z","timestamp":1783511853815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:33 GMT\r\netag: \"dh52kiz12ncy15o-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQqlnd9AoC2%2FXwNxZ5YjJhOKyi8mpnwUjxGxp6%2BlATWdaxuUJbHb%2FIWRi6TdVyT7oysRvBQ7x4PUUt4ntjBIcQfGFwFnmVoMyobYeEFjLBNk2X1k0R48LnM1S2dOjs9flS9VemZUQg%3D%3D\"}]}\r\ncf-ray: a17ee97e5f3023eb-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1709,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-12T15:18:43.795193Z","times_seen":55,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/be-gamble.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.836Z","timestamp":1783511853836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kixwl6e020ob-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF2rGH0OpPkOuWQL%2FH8Uy9%2BicF1hx42gmabw2WQpKaK2blGZkL98nY5w10DrnxzXyswnRTu0p5oUn7drFbH%2BpDesSGWR2bualxhxNmDvX61XeNw1uhORyqa4CHpFpisqs2oyPTCLYg%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4923eb-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94187,"size_decoded":44548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-12T15:18:43.586672Z","times_seen":30,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.767Z","timestamp":1783511853767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsSdJSfCapVivwKo%2F22PXDclXDaa%2FmslhmRrwkPpa%2FzEz8%2Bw6IWPWBKjU7j5u9044N5dK3TRIcokJ37SCWoymfipvi2SXpDE7BCQBDWPzaAA%2Bitoi6U8TEmGU%2Bx2ciz4zeUlMADKVw%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kixwl6e09y\"\r\ncf-ray: a17ee97e0f0023eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-12T15:18:43.752917Z","times_seen":41,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-0.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.808Z","timestamp":1783511853808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiykeihm1bg-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c8%2BcTUzP1b%2FDqUknDzY0funW%2Bi9AMtE8Hp7OMxkwUBmcQkGAAXJY0HYl4ZSeQ8EigFmrXz0EXedthRbIBrqqQO5aV%2BmNDO056Ba5FXLYM%2F7AzDvotpSl74DDsPKNMI1vi4G8NiKvQ%3D%3D\"}]}\r\ncf-ray: a17ee97e4f2823eb-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1708,"size_decoded":1753,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-12T15:18:43.898118Z","times_seen":55,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-2.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.810Z","timestamp":1783511853810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz12ncy164-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VFJ4uRqhmYGQeZ1m6Vqb7Al%2Fczea7%2FO5QtcaDOL%2FhtenKHqDiWQWOKbqgUvEJ63ynLBFFNGyvyQpK8TOjdZwYi5Kru4oOY5B6s7iCI%2Bbkj826FhuMWxEMgC3djBFy%2FNr3%2Fxpslbbw%3D%3D\"}]}\r\ncf-ray: a17ee97e5f2b23eb-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-12T15:18:43.805885Z","times_seen":55,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/5-great-star.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.827Z","timestamp":1783511861827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/5-great-star.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/5-great-star.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgmjwtqqd01\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Az0Cgwji4uqLDakt1xAtQ2S449Y9BBkg9AqjZIQYkngCGZILoDkOQjFfLCh%2BtDV%2BI2BcQutXToY%2BA1VYRyPBKUVCJv%2B7EVZAJxq%2Bbc2MkIGxkEc6l7%2FJkVOtKu7f5LFu4mhyFSBfxQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b06d4023eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16849,"size_decoded":17879,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"a3eaa6bd0393b34c9da50f282e7edfcb","sha1":"5f81404ff24ca0f3c3dad1e93b2bc091e175d18a","sha256":"3aaff1095c62ce55204dd8c955bc8658a44eb72b8ff1a9270d30e590c7683362","sha512":"ec5e26af4cab869d45fb074d2e89458d346c3048e134fa02c0f0d9cd092ece353994c03188363a28b57a246e0b341423399f45c6d728ebc039d138fc1241175b","ssdeep":"384:qwNtIHDfmzsXTTo+JXDuyd+PtZqm9vTXeIR0XRaVvQu2v/:PbISzsDtd+Pqm9vTXARO8/","tlshash":"9f72d197af118f99f15c07f65644c1fb231477037218294799934f2e67ae18c2fc88b5","first_seen":"2026-03-16T14:22:50.898498Z","last_seen":"2026-07-08T11:58:06.151734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-1.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.809Z","timestamp":1783511853809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyp5zb517d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sll65n3JopZKbjF6MLzhYKGTFU4UNsy2ulWkDej%2BlT6sxgnkw0WoYGO4htQyMWmXFIQR%2FwP1JjJwlc5Sf8j9e8k5SP48BVImVdGYm3xGZ6tmP5da6JHVab5FoKj6LI1MXMZQcusxWA%3D%3D\"}]}\r\ncf-ray: a17ee97e5f2a23eb-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1653,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-12T15:18:43.920419Z","times_seen":55,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/images/text-block-bg.98c87d8c.png","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.199Z","timestamp":1783511854199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/images/text-block-bg.98c87d8c.png HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/images/text-block-bg.98c87d8c.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n560mspwet9t\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZ08lgBvMKEUFhk92xha7ojbUEcpr%2F3aj3Gy89ctWXOAKMTvNDTZEqR0sv%2FDjmV2vy6ZzkCQsueURxVY5KYL1Kr83Ctn6sUESbQKOAaDKjLxzfuYXl%2FmoHhrKEuA7VtqinJ9ZXYk%2BQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980cf8923eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":691121,"size_decoded":692224,"mime_type":"image/png","magic":"PNG image data, 1240 x 452, 8-bit/color RGBA, non-interlaced","md5":"3d30b0ef9abaca665f714137f1436c0e","sha1":"0577b9d71310543b920618bc32478ec6279bbe08","sha256":"280d28d3cafe11be4631b21140a24f568c75870c1befd522569d31eb611c10f2","sha512":"8c472681e40061bed734859e2e8f4dc0adb871dc95cb3d6a07c51e385f5ffc8aecca69342994118d3ea7a875e60e17d8c33e81bcdac8efb6d4e225ff37624317","ssdeep":"12288:gSEcFfk5rDXLnKEgeCdf6eRxigxiyBiUhE45SEDiMpEdpD8lCO+:9lkrDXTKNePeRxigsykgE85iMpEdpDv","tlshash":"3fe43305e0c026e3d75c0fd27357a969cfb884626c18bb9a5896f0b3db5f87a01c4f92","first_seen":"2025-11-25T22:34:39.24658Z","last_seen":"2026-07-08T11:59:44.414023Z","times_seen":12,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/bonus-deuces-wild-50-hand.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.820Z","timestamp":1783511861820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/bonus-deuces-wild-50-hand.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/bonus-deuces-wild-50-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgnqs14ffip\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFsIDjYJPZ30vHQHdoGI2222QYjXVJO8H%2FEVT5LDpcA%2FFt6IzNT%2B1Y433wY8lm1adiCp9XvYF0NnqP5HwjLRLbQJEYsSs%2FyRFDzPI8g4rQ5bet7pn8EF1KkN8ogTGWG7Js%2Bdaux8zw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b06d3e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20113,"size_decoded":21154,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"62cdee09cadb876f10e0f6870ed425a6","sha1":"0b2cd2c1425ac26ee409fa22aa1f56c02620c1bc","sha256":"31dc8fb8c96398ced81306aa4d4ce45cefe3b3d1f5890af2eedf6ad9368eee32","sha512":"4f4f353af9176f7be900361723debee8623f3f0a9e36c62d95fc64b56a38b8a812c7581f8363bf8d7e28835646859c72f388a5c98bb0a0d7827e6f5dc0ba0b83","ssdeep":"384:tFL8kMJxEcKmgaTU7wviREIojZAOcdBFzr50NuAOMM8Mme7J7wgn4ZtHlSuv/t/M:tFYkXRa2mmEljl8bzr5OMmEwO4z4Q/M","tlshash":"a992d074031244a0c90d2efe67dcdff70712a06fe5d6429991d96e7f8762881a8e26e2","first_seen":"2025-10-14T14:51:49.369538Z","last_seen":"2026-07-08T11:58:06.155557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/glorious-empire.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.784Z","timestamp":1783511853784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/glorious-empire.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/glorious-empire.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgrg5433rl1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qsi8d0QtBlt20evyEvJDf6Ex146yLe4jQHeZ4S1184LbLxYa%2FWXHeyIBlXOWkL4J4FIhYPTKRIXFQv7VaAOPk8BjKuQrREHSkmInLzJd71zSSdmmryF%2FDkmESO7F%2BstQjCwE3SsaQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35749,"size_decoded":36776,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ebcf90ca86196519e8855ba9708fb957","sha1":"64dd3f32c22ae8dd28547f16670b34aff8b4d155","sha256":"1348960d6ab38a2006dc8890878335291e8d9e0286a2928a31f9e7c5d5009d6d","sha512":"39cd2afd19b404733010e3fd18faf83a909e54b3b3de9a64760cb3abe97b122d753c402c767c7f4d5717ba558abe45d8ec4abe336c91e503a418f3bba6f9ab90","ssdeep":"768:gWifDbUmB2VeNFcb7KkEWnKdnwVr0R6IqQm6StJBHNANLkcwVMQm+U:dmBQkybYWnKdnuynfSLBHNANP+U","tlshash":"cef2f2ea10530212f80a4c54c7341f7b2bd89e6501d8686a8795a13afbf66e3e7152df","first_seen":"2026-07-08T11:58:06.157059Z","last_seen":"2026-07-08T11:58:06.157059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/next-arrow.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.794Z","timestamp":1783511853794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VY73kyEsq9StcIQNXP2ITiQcb17gL6ZsY44HvqqKdSFS%2BM2%2FjChyJjaipLvRRokwVN%2FD0BMTpCg%2Fsf4SKuf2L7b%2B4nOZHDcPHGUR2MJ8ohy0VKVICGzgf3EdxMj%2F63CU7W3yqP66Q%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kizall006t\"\r\ncf-ray: a17ee97e3f1923eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":1176,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-12T15:18:43.509688Z","times_seen":76,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/cosmo.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.800Z","timestamp":1783511853800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/cosmo.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/cosmo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkrm0o669z\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzkSvLI%2FkjMNhpsJvdHZlwqziQy6Oo9LJVghY74IVs4jNGbi9lWLTmZEUTPUUEqg8rBTeSj5lQ70mJnwpZ3MJS1PUHB%2FQS0oqohaoy1Vyf91%2BTcQRPdI%2FZOjsOD1pJQJiFaah7wbow%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f1f23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8135,"size_decoded":9156,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"71cda44ad1789f6bf92898bf556b17ca","sha1":"5c1b86620a9e211e8dc7e8cd6a5b9aac932c17f0","sha256":"610e15efe2572c77760ecf3ad3cb0525b6ac94a985e2d8f984b8757bff37ade7","sha512":"ed90ea3d0ca99eb221fcc43209aeaa1b884ed8dcf83718b87a471c9e95f354b55bd1ceba0d4232dc6dce87e8838ecf9dbe327b42bda008971e28d81dce85806c","ssdeep":"192:Z4wlDF3zp1Lw/yA6kH91mQBemJdfsOw3wSh28tKleFj708dy9lY:3X1LwqICyemjJawSh2SKUdIs2lY","tlshash":"d5f18d40a2308bf4c83f70b6910025197ea00de6350d67ae4e854a28773dd6fec5bef1","first_seen":"2026-06-08T00:51:55.65618Z","last_seen":"2026-07-08T11:58:06.158711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/previous-arrow.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.793Z","timestamp":1783511853793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi0UEawCwdQ9gjtegvXyg%2FLfnPh5dDBbdV8VIXEbOZNb0PGAqA%2BLZ9gPughAdnTtxWCW51tuSH81Cdct1ECsEXx65ZVF0lsHEWNxtZMg9upwbbbGOXEdYfWg%2FLXpu3AhstTXe0ctog%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kizall006n\"\r\ncf-ray: a17ee97e3f1823eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1168,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-12T15:18:43.469123Z","times_seen":76,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/architect.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.797Z","timestamp":1783511853797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/architect.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/architect.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkdbm7m631\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsXf%2FK3hIQXOhapG1gfN%2F4NBde70RJ2%2FX88gkfr66lZnFU9GeaViQ3KOCNOZxlUC68UATOdjhBmQXpE6M8kjMFRtSwSFxzt9T%2B7kncAqXFNrCK7%2Bzep%2F%2BHa7dFzPKx%2Bg5BvC%2B5MZqw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1d23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7885,"size_decoded":8920,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"2553ab6a5ce1d8a2a00d63bdd1af647e","sha1":"b5336fd24fe7cb5359869f9c313bcdae8cdb9318","sha256":"21c0a31da6651f34ba33ea888cb0e0549cb1ba97caf85d22d17e4a91781f2dcd","sha512":"94c0716a115ffde1c8145d1cc09c519f677e6db92cb1a066758f068679714cd69953726a09fbb8b751947ef5cbc14b5b3e79da533774ba388e5f25d81c59df28","ssdeep":"192:Q/ZQqJ+DGdYet5XVgCUMMr6YM2lLTALErZ87:Q/ZQqJ+D0YethV06YNNkwrG","tlshash":"0bf18c0727828ca8eabf34f210e666d874d09c2d37f481697cd1b7bc1b1d9b29a12024","first_seen":"2026-05-04T16:18:31.014915Z","last_seen":"2026-07-08T11:58:06.160707Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/1.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.831Z","timestamp":1783511853831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiy8huft1be-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFLQAU%2BE43k83Mq37HjFNT4VMegmxJp6wjaQrMBIXjQ%2BO0N6lpj4t5WggO5DpyCVE%2FXsnEzHmRZGnv7HfcK5dI6JqUC9FB14GT671TL6QpMQ%2BVZwxcFnC7mXgGTlBUngQPhQY%2Fg%2BUw%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4323eb-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1743,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-12T15:18:43.921009Z","times_seen":69,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/close_icon.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.833Z","timestamp":1783511853833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiy1cn7j1ih-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FYCzFSButWPxjkdKFFpuM%2FzmFCw2HAjDFfIbYjUZV3TUMZ29REy0Xlv7SJvzeOczPUZW8ZvOpBJoBPNKeASFGPQ8il9PGDgURGJENLyuwBAYvsNchNGM4PCrw9z1NgusmZKRE5ldw%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4523eb-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-12T15:18:43.565109Z","times_seen":65,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/egyptian-wilds.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.828Z","timestamp":1783511861828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/egyptian-wilds.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/egyptian-wilds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgpzqz2cg6z\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBwbtX1x5bwlwkZNWFi%2Fxh7f96gMD0iTH0SOcM4xhq7tMCgpiRSLCCifvYZyv4iUBPBPrHoDknDIlvyex3v4mGkGlXAPGIQPsRRaXtYnk9QouuiqiDI4OME4f0mlE8WjhW%2FBjS3ZEA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b07d4123eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20987,"size_decoded":22011,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"0b4363605dec496555ca60fcfba0bed0","sha1":"4421f2d8a6bed6aee8dc2bbb0ae91d04c1370bd7","sha256":"e294eb070aed02e0027407c5910828832c775f1501b6d19155a759744c7efbc9","sha512":"f0626ef1c646d9e39594abb56ac39606eeb33abd7a97f88338312cc4e5d6940184ff71d21fc21cf093e1383f79fdf788bf5b211b25b5eadbcab31545b784c3cb","ssdeep":"384:aRGgcMwGR0YClaCOqEC6BlcHE/Fz/rmnf0X+03gm5nioegnun:awg8GREROqlclJL+K5veQw","tlshash":"a892d1079fe4dd48e91f793f94b9c2219da24f22762c0f35e4508f544ba587d9cad282","first_seen":"2026-07-08T11:58:06.166154Z","last_seen":"2026-07-08T11:58:06.166154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/app.css","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.739Z","timestamp":1783511853739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n560mspw1abu-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mR4QIWg%2BpwvMWdjxL4Zk%2FSHsnvOCZn59kdqsY4oUxCqHOZrPdptIh6jIAwsxy7uyP5lDVZqqQiG2TGqBPg%2BLiZ9MzZyYuYAj6rOdU3QfQIpA6XyoJUIYFYsedBaaiLjMQbk9tlgE0g%3D%3D\"}]}\r\ncf-ray: a17ee97deef723eb-OSL\r\ncontent-length: 10730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60042,"size_decoded":11778,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"131f18e4c11b5000b918f5f4b22e1a96","sha1":"190fd0496e373cb369621559dd46623a03e94c2c","sha256":"6842c8eb27cd9eefaefe3cc06b63d30d12a2ac2bfa04d3cb4b3a12392f786e0c","sha512":"cb72e68e9e1ab6e86cc58bb39920bb2ac2941f866ddbf573f27d21773ae2d9ca2c80e8c020ea8ecc6c0660a6f4ee323a51f669160e4041013e0e9986346f94f3","ssdeep":"768:L0O3WIIq3jNoraewX2/weIcpcGmcYXlMVGkIb:L0OSq38aeo2/wc2GmlMnIb","tlshash":"044354232659602db03fc465a8d0a69d312dc417e76f57fdee52a174c9ca2e31b33b88","first_seen":"2026-07-08T11:58:06.168782Z","last_seen":"2026-07-08T11:58:06.168782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/banner-square-69b94e97cd5db3.26161441.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.203Z","timestamp":1783511854203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b94e97cd5db3.26161441.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/banner-square-69b94e97cd5db3.26161441.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc10mz\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBeybhvSEyiN5AOKfubOrZ%2Fo0bV2VrW%2BkWx%2BDic5aog7Qp6ZV%2Fbfkb935sMgElFQ6RJBN%2BQcKhr3FkSfZ3z7ICMhZYw7tMXEmCEjgr58why3qQtuxp4ELIx4fmUNhqspYqq0zRnScA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980cf8b23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47483,"size_decoded":48539,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"38848e6bb41ad2af25119deb39ce89a5","sha1":"e5de179393bcec2d8c063b2216804089d586fe5c","sha256":"54a851792e0a8bf0f4fef20b7c7bb780c27211259d4ec377cc5a4441011fd3be","sha512":"07dad17808030685670dadba4b7f60957014d36d2a1d6c7a422243e06d77814c29611851f7af420cf015a5ece010db0500c46e5268fe182db7c002e8cbd57f1a","ssdeep":"768:vpGPW3iXgvostfZFVCTdmcXRo9lecyIqDmFHQ+pZq1sFgKPyDINWQMqpLAd0C8D6:vpqYiXgw2f/4ThoTecy5m1pU178+ALEL","tlshash":"2723f12784534e7087dbc8ac2783a6bab7652cc32e7157720270d42be50818df652dfb","first_seen":"2026-07-08T11:58:06.169778Z","last_seen":"2026-07-08T11:58:06.169778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.251Z","timestamp":1783511854251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n5630j6deb-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3qHX6zuHjx9hfvJ2G5NiieW3hTzRCPGe3b0oM4Awq6%2BDSrevf5UG1yUEXXAM%2FrlJ6pYOKInyQLiZWsXTjednqHQ%2BsgaR6lSoUszYjSXnAgM0u4pkZPWYKPgYD5%2F9pSW4xGY2mEc7g%3D%3D\"}]}\r\ncf-ray: a17ee9811f9b23eb-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":1299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-12T15:18:43.52101Z","times_seen":60,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/winner/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:48.401Z","timestamp":1783511868401,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ro-RO\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"606\",\"163\",\"580\",\"475\",\"558\",\"574\",\"154\",\"928\",\"328\",\"898\",\"125\",\"896\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T23:29:43.573337Z","times_seen":17223052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-4.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.813Z","timestamp":1783511853813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz12ncy19b-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDcewQKIGw2KXMKtHjlBBPdrf734UI5qK6phfhc754kFrNvkZb3WrakKCkWgoOyei0zCvB4JbBr7h%2Fw79NfUyTSFGeB3dnfh7dLmW4fiP97C0qDkBQoL%2BTWYr3M%2BhIi1z0B7rxL4Zg%3D%3D\"}]}\r\ncf-ray: a17ee97e5f2f23eb-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1631,"size_decoded":1796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-12T15:18:43.807502Z","times_seen":55,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/4.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.829Z","timestamp":1783511853829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZUujfRK2XRWOZwHc3%2FO4M1Oh2t47EqD%2BF3rjqgVaXeaqRkGsw7nk2OoALdgaaohE1Kdcmf2%2FpY7jWgQZYxg69av5duLOdmIUsnocSW6po5SHPeI3c2Uhu6pj2573OxfWd%2BQW7bjhA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kiyd9b9cdb\"\r\ncf-ray: a17ee97e6f4123eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1278,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-12T15:18:43.905766Z","times_seen":49,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-3.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.811Z","timestamp":1783511853811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz12ncy11j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxyLl0VkJc7nGmbpD0E08USAIY7ou8jxC1oJzzh7%2Bu7eE%2F8EUQ80hEaxQox2SAursZzbeyhCCpzW825EqWyHiRBAyAIa084tdPGIuQGyQTGhIJEJ1QovcyjtuH%2F%2B1R1xBIH53GP%2F1Q%3D%3D\"}]}\r\ncf-ray: a17ee97e5f2d23eb-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":1734,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-12T15:18:43.469902Z","times_seen":55,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-5.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.814Z","timestamp":1783511853814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gCq9wMQ5ZRe8zWwU1BKjAUA%2FEEARr2iT31niwumz0hkbDUgqgmjINF6Sew9dG9oagmTtxN6Zx1rEFeMBQrafCCGZoRlPGurzJ8XPGl8ldIk0DRLtHwSZ6oNbYYK0A8YFSAZRFtHfAA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kiz12ncydb\"\r\ncf-ray: a17ee97e5f2e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1285,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-12T15:18:43.816511Z","times_seen":55,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:37.368Z","timestamp":1783511857368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:37 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:37 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sat, 08 Aug 2026 11:57:37 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jZgY6WjU7N7GZYVIS5mfbF9JAAKFAU9CiRv4b03C746%2BgPcjYLFukp31YTcyC2XFzmEJHxl%2BsnpXLzI2wwuXggLFj2ISaVG7oP7lQvbO%2BU31OeCPlRh3Yd5rr1om0RUCWEV3jPygw%3D%3D\"}]}\r\ncf-ray: a17ee99489d523eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":1158,"mime_type":"application/json","magic":"JSON text data","md5":"0e2882581f456ff207f3ea9cee5f93b9","sha1":"225012f0fdeb9a5196f84107445a608d86ba1fc5","sha256":"885c847187c2e65bfba87ef199a367afbea3c42b8bc5f30290b2e407c91da2ef","sha512":"5b0797cc82281569d0073e7f5b29eea25a3c58f781f62d2ff2c5a01a100f275a4a34dc147adedfa69e1185c9dbad25011c45b6f213c10af4d3c774218b2910dc","ssdeep":"","tlshash":"a0b0128fc4512d0fc77311246c1b3184925509c398ad041017ccc9c104e4d260323d00","first_seen":"2026-07-08T11:58:06.175563Z","last_seen":"2026-07-08T11:58:06.175563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/hearts-of-venice.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.830Z","timestamp":1783511861830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/hearts-of-venice.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/hearts-of-venice.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgs6c6lgukh\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoNtRvqyjMu8xYxraCuLQNFJNHaNh6sLQrzfhRJ9z7k0yW%2FylArRTpXpp0Ldaq3nEpO42R4JansV5lUSp0O5TL1M3m%2BuwOLyHTbadKPjxV60q7IAhpni%2FdDDTMOks1K2Jfq6THckYg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b07d4223eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39617,"size_decoded":40645,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b62aa845d5b9d529b45a3c209592514b","sha1":"46d2eca1c6eb45b763c65875defc82ad09bdd26b","sha256":"b0669bfef45475aef24c56c68286e2d58801c98bf1a138c434010b64d579e4de","sha512":"93ead327725f362924f64d1d658632f2948d0a5b5025ff5289941517535eda4bc6c5ae52a0f5f28e31b634b8f9b1c5f1fd5a454d0dc0592b312d4d496d383752","ssdeep":"768:GAj8svtkiUwmaVOclj4/z6AjT63+CkWE/T9UBqY9EPmgxh0jh:GAj8CF71VO//z6Aju5kWEpoX/jh","tlshash":"ca03f1f62ff2c671a03d4e19cb6c25cd13dec536260049b2ed1e4b1606847a199edcbe","first_seen":"2026-04-10T10:02:45.740898Z","last_seen":"2026-07-08T11:58:06.176974Z","times_seen":5,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/shopping-spree.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.791Z","timestamp":1783511853791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/shopping-spree.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/shopping-spree.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgvqxsqlk49\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkxgzxZ8cUVD3ydYEz%2BinGG%2F%2FH2QsMwoHtFTj%2FGQGr%2FZbIdG6VL17jEgvT8EmlqL07GUQe8HYJnad5SOHYS9pTq258zY9f4fSW4VtTu2nyWten9BQfLSNoX2QPNBY13zlXITvrwRGA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1623eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26073,"size_decoded":27103,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"8666871e50903ba8b70398808f739ebf","sha1":"a139938860d0e7d97154444eb074f07fbc16bb4d","sha256":"8f978977c65481fe99cffc3cca6602803d982b3e7c9376abbf89d8a4c4494e16","sha512":"f7484fd9c9d007e96be931cf10912c7e51fc65cdd0d30ee6c212c196f7faa199c2d0c61b0733a739c4737a222e908c0d635b34d0ae77cc37011c9bf8bc27e1d0","ssdeep":"768:3vmLjA81NguDwNRM9sVvhZKf4EKOfPE5d3o:3vSAyN+M25Z449OfEd4","tlshash":"6fc2e188fb70a719f0ab7a9cd70ea4707e4568587827ea4f2da47f31cb325491d4a071","first_seen":"2026-06-01T02:18:17.523222Z","last_seen":"2026-07-08T11:58:06.178166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/18plus.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.834Z","timestamp":1783511853834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kixwl6e01ar-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbxNYpX0%2FI5OQNnU%2BG1rehapxwmUX9GP5rRSZejG4mlr4rxy21bUWguuizGK2INdDaw2H%2F3xU%2BKNfXXL9WFeJm%2FXfMf8MdoWCX2msPdYRGXgg5AgTRnnPOUb4O2%2BI2fhQwGwId%2FeUw%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4723eb-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-12T15:18:43.556268Z","times_seen":28,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/super-times-pay-hot-roll.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.790Z","timestamp":1783511853790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/super-times-pay-hot-roll.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/super-times-pay-hot-roll.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgwcdefgmcz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4ic6i%2BdzV0H0kgJ%2BEhbdDRvcLSPJQE5Wk3j%2BVgcbkI3785eca7elqQGymPWqB7nOjaOYAtoAWJxC%2FLJLxcmJMhjuZXpSZb57hz43kOqiaVtTVbjVAzFLtdYZ0lHU1EFKvEKT%2BPmyA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1423eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28979,"size_decoded":30019,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"537677a2d0f7d595054cb838d5fca727","sha1":"1434b260bdd8d8317108cc4dc441cd43f40c7d61","sha256":"8648ee4edca577041c3c3b32dac42b498e37ecb18a21c4e02f744b93131794f0","sha512":"3ce729474722339e4139125ce5e2de1ac694dd7b6f10ff8bc2cb24f0aaa3dd4f961b81d839b0c2d7624c714641e1614a2fe6a85a1f910a78ed014372d1a55571","ssdeep":"768:3LgcJk1aTn2hAZ/FcKxJfX1v8rYJ0DDK92ZHMrItI:3LgcJ7Tn2hqFcyJfirny92ZsrX","tlshash":"cdd2f21cef7a5e85ec5d222343c88bb7769b6db46a1081cba585f433773e42058b2f61","first_seen":"2025-10-14T14:51:48.992373Z","last_seen":"2026-07-08T11:58:06.179884Z","times_seen":3,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/revengeofomega.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.802Z","timestamp":1783511853802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/revengeofomega.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/revengeofomega.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgltpr8c48g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQU4hzOekeiriUNHT38OYTSOJ%2BJGwx19CQ%2F3Iid5%2FxITIf0KWzIiXT95SJ%2BdStsXlX9tG2g8FJesvD%2BtVCTywaUGu9fRgikvGVpV6vj07CJ2iRf33xWAccYER%2F9eTcV2KtPMq6ENEg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2123eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5488,"size_decoded":6522,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a4917cc86635b60eb6b47ef5391c82fd","sha1":"9ebff1a9c214748242dcc9c5baec98012373197a","sha256":"924b396edace2cccfcb92cc48780dadbd2a65273c77640abb54521c6ef50187c","sha512":"0a52a781b32024c7f63fba1e35a48f5a0180db88dc35c3552f0af9c4bac375aad903796d9c680895ea470a745b8ffea5e30199c097f86db7df4ce1894cba6c6c","ssdeep":"96:sk5tX0UkpEWUBDIgySoghhbnSxL+r4+W+fcPsy:sUqELAgutgk7","tlshash":"18b14b437bf0ac02d61e0633cd9c53a2c703ae21b5b4586b39b54dc993273a3c9c0b52","first_seen":"2026-02-04T18:36:07.398652Z","last_seen":"2026-07-08T11:58:06.180894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/cowboys-go-west-hd.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.836Z","timestamp":1783511861836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/cowboys-go-west-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/cowboys-go-west-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgogz3mtg1a\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsRc1iokAc74i9MD4xLga7q4Gt%2B0IRCQXycKXRgS%2Fhq66MYgQ4O2bjRDKoxz94O0fhxarP6lk2M7jdHxj%2B5Ph4ZEUylpKsPw%2FUrMFjXN%2Bh8FDMj88TaL6HHuE24nv4uxfzwxxpAHVw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b07d4623eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20782,"size_decoded":21816,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c2b8ea772352ca0dfc61d246b7194d99","sha1":"3bc63d5eee2a5ea5517020e5788eed9aaf179167","sha256":"9d2babe69d89f01cedddb143571f77f3d036aafb1af30573003b2b9708c637e0","sha512":"b2f675c8d7c2f41ed3fd4cf55153495b6b30635f6fa05e7af4b912ccc047b8ba82c5ad76b3c6d53b4e9afbd2639dada50d04d057a3455292ac7ccff91685a9fd","ssdeep":"384:XmuNPmD5fpCUhai6MUo9pTjpuuSmE20p+sIvqJOC3r9Umwn:NpmdfpdnUo9ZLVE20pZIvq0dm+","tlshash":"7f92e109a61f08c4e10e5d19ca37ebb617b04f234fc39ce2421baa84cfb68d7d75555a","first_seen":"2026-07-08T11:58:06.182271Z","last_seen":"2026-07-08T11:58:06.182271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:43.375Z","timestamp":1783511863375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:43 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wi6mT198TDxXxZ0U1kn14Yex68kJ5RMshU2CbecFe0QXe01DFh7ZX0vzAC0mkpFgq7o1P3gh7BqY4j3GPqeN4ZoE979uG8118W4yPwYfqYhIeZl4c3nfGQZZi8vGLJAKCYCBwGEGCw%3D%3D\"}]}\r\ncf-ray: a17ee9ba1e1723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":1050,"mime_type":"application/json","magic":"JSON text data","md5":"9114ccfc8b88156531ad612c4c5d754c","sha1":"00656d7dea13bdb8935b56c39ce0945b48f5603c","sha256":"fabf81b966b4fce135695a6bde85709992a5cec979e33f5ad69ae1c6c9c1e3c9","sha512":"5ca4491efabb4b780b60f483b4437ff154353b5f24804b22e0011831ff956e22960ed2e0196fa513f7314b33ca13aef938bc0905e375b1f41757567d24daa70e","ssdeep":"","tlshash":"c8b0129d8852160fe32322f0e45b30d452b80d9371e08a101b54dc4044e46464123c12","first_seen":"2026-07-08T11:58:06.183984Z","last_seen":"2026-07-08T11:58:06.183984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-9.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.818Z","timestamp":1783511853818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz3gdrp16g-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UT7QuXVgEEtjDI6rIUe1E6Plq7DTZnEe6pbP0xKFz77DiSbAJZXhWKcg7ZiasgJ3kfTkPkhYWSjfTrqJEQWfoEoueqJpvcDZRaIQ9gM8VYd68aLfV4zzsWj%2BhqWn4czCDrrhh4wYXQ%3D%3D\"}]}\r\ncf-ray: a17ee97e5f3323eb-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-12T15:18:43.777709Z","times_seen":55,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/images/hero3.8abd0bc0.webp","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.195Z","timestamp":1783511854195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/images/hero3.8abd0bc0.webp HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/images/hero3.8abd0bc0.webp\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n560mspw57q\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vx9xV4ogeM6IlXSgqJ1HpOyIbCntScLk%2BAzPRXw1AP7%2BBxAaWtKrYrbrI29pX6fhS3mcoRyOIoQgi80IThwZUCT8bKUEBBbVaO0tmsRr5%2Fu5J9G0Bj1ZYLKwOs%2B1S%2FQaFZ0oNt7zhA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980bf8823eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6758,"size_decoded":5277,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x760, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d28aa48798158135b67e00bdc0edf88d","sha1":"16848b8de4af6ca3390673b1b1ff65341336e97a","sha256":"17a792b9f42c5190867fa7396ac526a4ff678805a0fba43389af1a466312033f","sha512":"4ccf446b7b74bc80ebd809dfccfe4e9fc8443de9003bcc795b5db2a03fbaaa2ef08c5ddd9ed53b2624f7bededb13792df0e2a673e27ab11187cd873cc3c6539a","ssdeep":"192:Xd3sRlGEDhtPxCVGkTIiIApCFRq0Kn1/eOHK56/:N8/GENtPxCQ0IiIApCnmgOHKk","tlshash":"d3d195ecf1b18465eb2c1b56094a8af72d5dab2f003647ac7ab8d4b152ed50c1fadc1c","first_seen":"2025-12-01T07:25:15.285226Z","last_seen":"2026-07-08T11:59:44.450671Z","times_seen":14,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/stash-of-the-titans.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.825Z","timestamp":1783511861825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/stash-of-the-titans.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/stash-of-the-titans.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgw2ugseydk\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZtVdKbBsjcBEzkzXI4%2BBl3OKm4OVvpgMZZX8SCG6xgGHOzRuJptyKDTIjGs1dGsV9d3bfXVoDbqZQXCdEvqyCu6TbZ2ZgnMKuyrvAjwGywFJLhWIvc5L9gX9OhrcAIuVUomIgTP9Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b06d3f23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44552,"size_decoded":45579,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"92ffbbfc56d4253dadf806192c334414","sha1":"120d8c73edcdba6aac9f9eea95b5c39dd7b86e2f","sha256":"b8e5ca6da71c24c946c8050577a78803726be595171fa1b050772c9924236c35","sha512":"6ef97f6ca702249e3ca506ebf0e1a0da3dbb43682fc413c59d5dcc06ef11f48d2ff32a55dbe475bb6ff72f85d10ca1a16ac76af3140a7be854564d1b2cdf204e","ssdeep":"768:lGopdZr5dKXWq3QMV2Oc2QwdA1FSv7l9Z1IKm1LNFLb5BOZ/GaRv0787J18QKtkH:lGwdF5dKmq3V2Oc2DdAf07HZiKuL/C/T","tlshash":"6113f154566e741bc9ef3f2f402c02896069fa7956c917cb6af8f15107261f03af1327","first_seen":"2026-07-08T11:58:06.188399Z","last_seen":"2026-07-08T11:58:06.188399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-8.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.817Z","timestamp":1783511853817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz3gdrp16h-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPDI5wT6QgP0gG%2FyE2ooFWjSJdJTX8QWWl60uyRYpF%2Bzwe8OzTiL9JQT8SXR5C%2FLmGpQp5rkxROw%2Bo8mLJyyiMgedOjd9l609bb7V5zMc1SbdwfQEAqxwz4g7ecNBGbqi%2Bq9ud5k3A%3D%3D\"}]}\r\ncf-ray: a17ee97e5f3223eb-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1529,"size_decoded":1722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-12T15:18:43.710575Z","times_seen":55,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/runtime.js","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.758Z","timestamp":1783511853758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n560mspw1jl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKW9iMOuL7clGys7N4KaqKq4kH5p1DYemc5OpGxJZMqgSL3Ta5h9gG88%2BfSAVWylnfBfaHf6pg3qeDpRp0zRBBtgT9pPDGkDUO1gDFo72CVVN60O7Km9DHj0AOs9gSnvxn2Df266Dg%3D%3D\"}]}\r\ncf-ray: a17ee97dfefb23eb-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2068,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-12T15:18:43.827191Z","times_seen":100,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/fruity-frost.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.780Z","timestamp":1783511853780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/fruity-frost.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/fruity-frost.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgr6m6g1dvn\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8u%2FFokYOCIdtnjNEKFkWmSrRX1HngQ0oO%2BCTyByCin3ABD8SITkfBLfwAMXDj8nvjExE6yeRQv9fmgYavKZQQFYEw9af49MCBxGAnJuRgLaQGdJf%2B0GDG3ar9KL0CNEBGxmKj%2FYO7Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0a23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17987,"size_decoded":19013,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"df7122d53160a8333db342c3e9747858","sha1":"3396426aaf907a02f77ba72c860f283a27cdce12","sha256":"8addb1dd315e5e0f5873108776a496a02740028c07938c4d694dc26b6dd60067","sha512":"4fc6289431d5af8a9e5eb3a012eead5bbfe420aa6c11d6a575530a5e2e405891e9149216bdd3a48a4bd01d927b813292a838b61c164355793f31e6173d66ae84","ssdeep":"384:mhjh+yAmGIzOPy4zZPdtIWmj4pc8hg/sE2utWRFo:6rWxfZmsvhQZuRFo","tlshash":"0382c04a37720849f26d19777d2e3fbc8d34ac05cf98596c85d39b90536921e86d4133","first_seen":"2026-04-10T09:54:21.376174Z","last_seen":"2026-07-08T11:58:06.191544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/hot-ink.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.781Z","timestamp":1783511853781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/hot-ink.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/hot-ink.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgsfv48ii0d\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsQxJv0eCjqsthEkt%2B1DvfYLcGWTDO6uYU%2BG4AgXEuZkZE5W9c%2FUfAMcYMr6rfZYYkQaHg5nfJ7uaHiTD3pl%2BEQQTMCA3nmjETVsJr%2BQVYcra0%2B8JVGddnpR9D%2Bpi9rJzQeZLN2v0Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0b23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23341,"size_decoded":24368,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"36166fb335642c65463360b7e858df3c","sha1":"a90dab3bd149c37bff33378f6d3c4dc3a0dba464","sha256":"b11764f71647f02db425efa61e41d741594895f82e9f4e8c622564412f5c320e","sha512":"e1ba3cce031813bd79a714472199b867d8946c2f8d9eda3f44593f6d7392f2cce5453a1a4a86155d93fd59ac1060c6e85c190de22405b5e0e3508e8ba1565de8","ssdeep":"384:QmYpHL3BhSu9CwwzQqwz493ya3xqJJrej3M5jg902vj3sngC:EFzBhSu9uUqcKxqJJrel902L3MX","tlshash":"28a2d17365daa9a1ec9d8d3ccd7f92b382405d891e10aa469fab3079d393605d0d73f0","first_seen":"2026-05-16T12:53:29.88348Z","last_seen":"2026-07-08T11:58:06.192731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-11.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.820Z","timestamp":1783511853820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiytxg4oi6-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fH2OZtZ9akWbPeuxvqXA%2FWpXiwRnii%2B6r02oI%2B4lzeLlkof%2FzvlN97wzvJe3a4N3chnWeqM31%2Bw43IQVyTMOZm4V6276PIeFcATdB8cbx1UPUXuNu%2Bl2vbJ9gwo5MTaHenlF2nrEag%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3523eb-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":1387,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-12T15:18:43.555024Z","times_seen":55,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/18.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.837Z","timestamp":1783511853837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kixu7fz92u3-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYyoeGlMJqo0%2BIuSe4arMZpe1dGxdWp52Nutw1n09tXhnsGdLOWjxwTmaPabyNzTUYCsmuL2yjiaBVUJ6prqOxUloxcdQeExsxck0uTyMKthL0UJMg94GBxEGkNnOhwCxYvGSRZsQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e7f4a23eb-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3675,"size_decoded":2242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-12T15:18:43.835852Z","times_seen":63,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/banner-popup-69b94e97b8c701.09040940.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:40.368Z","timestamp":1783511860368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b94e97b8c701.09040940.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/banner-popup-69b94e97b8c701.09040940.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\netag: \"dh54x8f4nklc1x1x\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrYec7WAolLk9XUz%2FZNWvrSZPb%2F%2BqE9mo8HWhqkvpkqbEFVoJAyRSa5GfnGkFs2nED%2Bj%2BPk%2BgdFiv8qRKD%2BbdMDNjda4x5GfhgSagpMnmHoVfq%2FP7Qfw8hyGbVCr3iOXMOHrhNjnIw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9a74c5d23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89493,"size_decoded":90559,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"8b9f994fcbd88a66dfb500896f7dc233","sha1":"d4373d83255e4fcb63cc2678de9624f0d8b92bf6","sha256":"d1696acf2cdbd909c8d25f9a07de03e7f5b304ff5e09bf29352121a0d5e31b76","sha512":"40540024e1acd72204923b669b73a3c5d186b4a3c0ce0f3b15ad5cd52a8b0e01c65fa3d13f0a797bc3dcdb453a184fdb7101f1a3a54c2400ebda73c510b328e7","ssdeep":"1536:+e6VS5xPSuT04802Uf7ukNbSHBm11i2f39iHgvC1/qcGgwXSTHcF/a/RxjwmgFo7:ES3g48NUf7ZbwBm11iQMAa9/BwiQda/9","tlshash":"79931303e0808353c668f4521793293b5e34126fa9c6502bee54d0dadeea797065dffb","first_seen":"2026-07-08T11:58:06.196005Z","last_seen":"2026-07-08T11:58:06.196005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/gambling-therapy.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.835Z","timestamp":1783511853835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiy644128qi-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4ULlIZgPM5WkhlAmnow2DNp7Tr0wqHwSYXnkF3nvXZoKb0ifgEVECnGwMMT%2BIxnRhkq01quNuiIMoxRcItqe%2F0sSSvKvJaxTP5oakxFRSTITdOR%2FMAC5SJN6NDffaIQRg3%2Fdqftpg%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4823eb-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":5679,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-12T15:18:43.484962Z","times_seen":30,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/banner-jackpot-69b94e97abbb21.30697262.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.208Z","timestamp":1783511854208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b94e97abbb21.30697262.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/banner-jackpot-69b94e97abbb21.30697262.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc262h\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rlPRAwlGh%2FTfJFhSYtMFNcnnH6d85zfDM5F2DWtHXfTkv%2FjHz%2BiXXid8iHqMSy6rzLKQeJi0KdtLD%2BBLvMbo%2FU9y2dy8wKQzRmuvrZGIa%2FNT%2FjMd1tqhf3pOWOnq%2BYSwakOGcWVXg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980df8d23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101177,"size_decoded":102245,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"ca5f23b39ba9117ccb7fbf8e3f7a35ce","sha1":"10efb981dc5a6a6f01afcb02945c220f124500ad","sha256":"cad4c0f65f3c4c54dbf935d4ccd52c62b5a63b614601856dc669bdefd4433318","sha512":"b86380bc12560930d14d22a05b209976a4a3865440d930246242b8b970b0dff59703419e236b653e76c39da42cb7198daacd932adee3e841b5f9a55eb10747fa","ssdeep":"1536:8sUKTAFB85xzC21pt0F4POtq5quu5dLgiUTyf4+C/rRr5O3CRhlfitndDVK/VfX+:m85pxp24PwqEuu5dLgi9kdlmCN4e5XzS","tlshash":"cba312e38f9db3e95f03b07d6f4bd12e731ff5907626c84849a90a54caa11dcb468e48","first_seen":"2026-07-08T11:58:06.197914Z","last_seen":"2026-07-08T11:58:06.197914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/apple-touch-icon.png","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.883Z","timestamp":1783511854883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:57:35 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJ2rUPHe9%2BhOrtfmd7Z9MfiHT%2FnTaVlvyfM7fG0X6bHXXAapIbFbh7PJWN%2BhlR68OLVVRDeGgmNQQjUmi9xoBQiRD4tW00woLMcIKBvrfVxaiONUbMHYx6g%2BiqetfvDntfvGeNRQnw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17ee9850fe723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29908,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-08T11:59:44.437371Z","times_seen":6,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/the-faces-of-freya.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.777Z","timestamp":1783511853777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/the-faces-of-freya.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/the-faces-of-freya.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgwlwc2hl6c\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLNoe%2FEqzylhz2NadcbHUMlW%2BI97VvyHKOGBAeC3P0LW%2BMPizOJSnRBXkT4x9yO03SnMtkoPPBexUSGTT0iW6LY1Mk%2FjdZlhbrgirVgvfue67%2FM6AAlmJ5Wprrd5I%2FJ464DNbJIWmg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27444,"size_decoded":28480,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"052b0e4d0f9ea7142fdae26b8b531ec6","sha1":"a8b3af8f6ad9b5eac03ffb4d37807214ba437afe","sha256":"0e76cc9e87fed5ca9b8bb8af8b321d965e87fe6d8ab240dc4f33e58195e3079d","sha512":"b01a18ae8cec85b6b0c1753626cbdc784d69da896bafa6976f373e57a24f494584346b2d79b43abd986af14754d326cc53246ab03f2aad029ae3bd0353ff6e05","ssdeep":"768:DQh1fVvf5OsLRwCUE4S9Ko4zzRJ2wHDhk331:khz5OXCUjzRJJDen1","tlshash":"1ac2e00a5b1c8903e43c2e0e9ea5eb7f8547f0350495139332ef78b6376f164e8a2ad4","first_seen":"2026-01-12T00:47:03.704556Z","last_seen":"2026-07-08T11:58:06.199799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-13.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.822Z","timestamp":1783511853822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiywb6jff1-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UepsRVFel9wPz5D70CdI%2FNWN1Lx%2FvBeYvsEMtbZLw3gmgfT1FVvdcoY41kdLZ4yntsh9kMFnGldeaikxK6HsEuib4fsWYm8W1IjKK38UfWv%2FTOEIVcgnPvW%2F7I0QhXn8qg5sfKK9lg%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3723eb-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541,"size_decoded":1352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-12T15:18:43.482639Z","times_seen":55,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:46.376Z","timestamp":1783511866376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:46 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVhUBFyEgPo3EySn6J5PCT0fvsEQZx%2BkUo0R5zvjydMWWW5OlBnro8J8OLnFvSWD7trNEznIKaGJqVA5peDPGDIQDioNjdd3YxMPo7wn%2BXxH0rtJM5gdVx9mCMEXy8ShMhqXsxU6bw%3D%3D\"}]}\r\ncf-ray: a17ee9ccd84f23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":88,"size_decoded":1045,"mime_type":"application/json","magic":"JSON text data","md5":"002f8f01ad9af5b8dc4f5fb2dc1bfd01","sha1":"2747404d9b45874c0451f25b99e84ecf09321ba5","sha256":"dbf6d7aea23a7a64c7bf21f677d0eca5c739d1bdf4c38cde98f3bca8a0a08537","sha512":"262050c46e105ced4a3be0c7f35212e3a53d7689ef524a7941040f6197cac907398927caf6dcab138c6a2c430fa89e9a92363e09f035e547936c2f182fec3cf9","ssdeep":"","tlshash":"35b0118ec000088a03fb0e08a83f32c028aa0a8300e00e222a88ecc80b233022003c00","first_seen":"2026-07-08T11:58:06.206458Z","last_seen":"2026-07-08T11:58:06.206458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/jazzy-christmas.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.772Z","timestamp":1783511853772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/jazzy-christmas.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/jazzy-christmas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgsywzilq02\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkDXyXhNYesrTvayAPfOjymatvDY%2BFQax2X41RAjeqNTVbxiFrzumrBhSa8432bEvHOYBvgroaVG2BeK2eMuSe0mxTncyYwHFMueyI9dt9crLNRzUAjAeiPf1De%2FXgw%2Frt3iVDmI%2Fw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0423eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33698,"size_decoded":34727,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"83e7ca33265099d7175063d8a61c2148","sha1":"83c4daee4ad0abecc8fe8493c3e6d05b01d60c35","sha256":"49c37057f7a3b91d48f38ae0cbb9619b8843de8fabb87e3fd5a09d5bb31d67f8","sha512":"5172eabbc629addefaf815b12268f56794f8d6751ec85933f66efc6caa5e4483d699b55d2065ffac693606b47be4c526efd7b61ed96a2c3621a817a60cde53d1","ssdeep":"768:DzLXcd92uI1d/c1Ivf4oDKPjmC7bTCpHwGybtwzIl:DzLy2uGt+yxDwiAbCwGybtwze","tlshash":"86e2f1b18b787006daec797360826f33479bf69038162c2b68611f0d5bcd1746aab694","first_seen":"2026-03-21T02:18:55.580244Z","last_seen":"2026-07-08T11:58:06.207368Z","times_seen":4,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/rise-of-the-empress.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.786Z","timestamp":1783511853786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/rise-of-the-empress.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/rise-of-the-empress.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgvf14osie5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7ytN4NwljumI6sLpE8F3b3FLSEEvNctAK65c6jU%2F0Vozhvl%2BhhbWTdRfh5PJnA3we%2FpyfsP1rkPoNJvmx3acm4xTMzNNnzcO%2FhgrqA%2FvdiFRr8SXUjdJQ3kauJjKTr2W%2FskfcPmxQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f1023eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23837,"size_decoded":24874,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"05b92837a5051e2d007f283af2e05ec1","sha1":"6ce4a29cd2b2e91c077c83a85ff39b4fbb312aef","sha256":"14a4479035e1e3a51dc95fb406e978f4d078a81f91ebed2436fa27d77712cab1","sha512":"5a71ac7208827b7d504c2f19e74f70eef6576a3b2ecc723908bc4b4ff8dfa859017b413e53a7c20f8d60556d2dfd48875922011447fd84571b3d62faa1fbf223","ssdeep":"384:u34hwfbrfAYysJ2i3FHaTG46CWXa2jK9UKQSdLu0aZQ4xA3CWM89gYiyHz6QKmz0:fwfbHJ2iV6TdUa3UxzZQ43WMC+QlzOya","tlshash":"f4b2e0bb58228e50980ec1f5132cf539b366dc637b3669fb80496a3a6723cdd54d907c","first_seen":"2025-12-06T17:29:39.276428Z","last_seen":"2026-07-08T11:58:06.208445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/cinderellas-ball.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.782Z","timestamp":1783511853782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/cinderellas-ball.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/cinderellas-ball.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgoc7mtam22\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sDYIVm7Em7Q%2FmFPQzD%2FavGq0zIoP0CdQbNPbZkEBjmZIG9kmmryO9ike%2F2GFBSztbtmIQj3t%2BdPy%2BT%2BgKdYbIm1v14w%2Fuxs1D3AMIHSW5SFXsu2%2B27KYXiCgsexL%2Fp4b9fQr4MSAQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0c23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28586,"size_decoded":29626,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"491fe9cf2639e89755baf7dcae288751","sha1":"4a4df7677a4bc949a4227a86c9cf8a2bad3aa7c0","sha256":"7105a8dc71e3b9491ee00fbe1572eb9110a8d117b3b0b054a18856e8f34f8170","sha512":"a129d61b166bd5f31a80ade2f9228fa080428846b6e7d737760d4c6c2e33bd2fbfd7772bb5cffbfc1691a3006a0db38fd6109cf97740d0cdd2cd35b294923abd","ssdeep":"768:W39P7KfM1MXxZIyAdUOSIxFqp+VrJsWQjG74w8QX:Q9P7KE1YxZITdUOSezVFz/7b8QX","tlshash":"5dd2f18b8912fdedb89cc174e911d914d44cabdbb010b3d1318cb742177e8b2db49e62","first_seen":"2026-05-04T16:18:31.039574Z","last_seen":"2026-07-08T11:58:06.209265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/dmca.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.838Z","timestamp":1783511853838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiy3qdmb6v2-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5JYfN%2BLc%2FIkzBsOwj8twsGOv9OEJswR1Nwi0gq%2B%2BLi2OWwPtA1qcKaU%2B%2B4fZ9FvW4yV7AxaABbSYyUTeu8tB4%2FWJXMOBokEwQTqymcIWBtCbfSGQWW%2BCTj9DrAlBDAwhos8YTXA2w%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4b23eb-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8894,"size_decoded":4589,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-12T15:18:43.494394Z","times_seen":63,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/aztec-temple-treasures.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:39.008Z","timestamp":1783511859008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/aztec-temple-treasures.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/aztec-temple-treasures.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:39 GMT\r\netag: \"dh52kgn7q5ucner\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sk2ojZiGzZ8PEJ6Zhb8%2FsO6qK2wd6ETMNXB9Z4s2kXtStlTWJgJ3gvrBiG%2B9D6%2FMia%2BwMsTUjH3Ym3QakSa%2BXlQZzWNKI%2BLSQtaW8gjaj3trU4YQmWhFj8tM74S5VI1dzOCE7jM0Lg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee99edb2e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30339,"size_decoded":31379,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3c68940e9e3c478715560f3c9913c84b","sha1":"5c00faedb327159c3bd589b800ed758927a0ef83","sha256":"b007ce8b9170c8562bf27d58f1dc6df9b4d1dcda46ca05e32c0df55f6d0fe1ba","sha512":"597311481edd7d2848b8b8bfefbce99af0291fc9c19c27f62c9648bf0817fd3d18bd9c38042ff43b75a53e55c7aefef07b216cbddc277c147469aca4edb9a61b","ssdeep":"768:HraDHt861KWtuItXpczm+YP5dsSvALqAy9KIe+qe2O:sHi60WtHZcyjH9vALMK/W2O","tlshash":"0fd2f14987693d07b0a98f7c88a45fcca3e04b700abdaa7535e03d55df0d6876c16be0","first_seen":"2025-11-17T14:13:19.289496Z","last_seen":"2026-07-08T11:58:06.210936Z","times_seen":7,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/50s-pinup-hd.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.841Z","timestamp":1783511861841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/50s-pinup-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/50s-pinup-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgmmak5ieyz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbEdJV6H1W1e80XO7%2FjnvMwgOom9MNL%2FejAYlDMTK%2FKfYpB2AgV0WS3rjqS2qIcQ8C5xjCbxDeU4eKs1JadYtUAX4yy82KkL9pevqVV%2FeqEwm%2FCumDz8gLSkaJo5vw2ko%2Bpt4As9RQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b08d4823eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19403,"size_decoded":20433,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"180fa79214ea546685054c1b75e44bc6","sha1":"01e00ea9472ac87d5db6e44ce5afb13474b31731","sha256":"983550833f005497f83e862f6e367e8be76894c15049bbd359ffa26f08b63055","sha512":"3c5019f01b54cd1112d9471dfa96146f5e6435beb79b027a642a7cab146d1735497f8469d64c491e438fb0e9c5092a22b103af0bc023fb2be8ea3b6713c8bf31","ssdeep":"384:JJvpJP9QIK2UoKAuUyYBX8a9P+AlA4+LOyRL:Ppd9lK2UdUnx9Pdm4+66L","tlshash":"a492c06689385b04fc4f09f05d9f24cb80185d558782fa8bf1a9ac1acb2617d71e1cfd","first_seen":"2026-06-11T03:08:59.169579Z","last_seen":"2026-07-08T11:58:06.211505Z","times_seen":3,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/crazy-monkey-2.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:47.663Z","timestamp":1783511867663,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/crazy-monkey-2.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T23:29:43.573337Z","times_seen":17223052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/napoleon.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.775Z","timestamp":1783511853775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/napoleon.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/napoleon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kguk2lcvki1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQYFOdfE4MNkLVE7W24GJgaIdzpA%2BSExfi5Z6DdKOMwiwYt6K9RB%2F8ZwaU%2BOH0a1yvgrUG35XUnDaPPCIIuoRtjTY4td%2FItL%2F%2FIMu9L8f9IQCDGBaudQh1qsPrW5H%2FHenOrHZV9%2Bxg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0623eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26569,"size_decoded":27599,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7a1a8c99b83521a8a6e707eee4204adb","sha1":"dca2ab98d0770089ba555beb86ab55636027ec18","sha256":"7c13dd29ec62c578047492544b0bc675af9cafa424d087a17b581c7241668312","sha512":"7c59fddcaf7660b283b50545989f72fefb26a5cdf4edb7a8f73540fdb75139222e43c45b05df24427543c2e172fbaec6cd51828f42d3b19ca53676432a896dac","ssdeep":"768:YaeD+PQU/nJcTdQD/FdtJdKBu/Ix+YbvXjlLQwa:zeCQgnJcTdQXyeIxjbvXJLQ7","tlshash":"a3c2e137ff61ae3a635f85d3c2cb6be6c9840e26af0c84196490cc88276e7a4d4d9475","first_seen":"2026-07-08T11:58:06.212522Z","last_seen":"2026-07-08T11:58:06.212522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/black-horse.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.789Z","timestamp":1783511853789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/black-horse.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/black-horse.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgnjmtw5byc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hCMUYZxGgmkL0HjHvu2sUBNFae%2BxGUufyECDymXAC9i2El%2BQsdgU4acLMjdN1SbThBrRKdG56holTx2O0kJqhKGOs5b%2FrD7%2FF1vlW7HEDMuuVRDVvCWH8zjoKwxloQWi5TIceNKkQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f1323eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15492,"size_decoded":16517,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b873ac4088afca447738d4f36678a5c0","sha1":"e34b6837cdf7cc8efa54382dd0c10ed7299fbb2f","sha256":"f2d26a2e864ad9bb168c2e3402be75890b7c6572187f30ad4e8102b8be915d69","sha512":"8977da631109d07e7a976634b5fc6b75ad2d2f6aa75a6151a89357d95ee96762bf2f34be6751cb9db890510564f3bbec092a62d5274c27b33eccf78a54877c3b","ssdeep":"384:u3NXVHOl1yXKZhuv2tHg9YFqi/ER5KQBB9Zfb6SpvxP6t9:qJlSyjvqXo/R5hB95pvMP","tlshash":"da62bfeaa3d38205df4d82731b6d7c3d0b92ae3a3ed65d1a3a2317d533719928434978","first_seen":"2026-07-08T11:58:06.213769Z","last_seen":"2026-07-08T11:58:06.213769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/dahlia-bumble.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.795Z","timestamp":1783511853795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/dahlia-bumble.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/dahlia-bumble.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgktzr2x4oo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOYNrJc3aeIi5JoAJtE8F3M62gQzxtDlGb8y1UCX2BgiL2M5k%2BSJ8GC7f5QGCjTrWOUM7VZp0MKMK73X7y4lXzyTzKMtymQPqfsjzC6Pcr9k7iEctxIFnbFoehkBMqcIpV1xQK8%2FUQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1a23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6072,"size_decoded":7097,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d5f48ad714a92c1a5cf48d09d7b5e9fc","sha1":"df1d7d8a74eb722cb52218260ac787c25b807eb1","sha256":"29265613b6773b16ad07e51f467a0fedbfef77f7a864fcef02ebac08c492fb90","sha512":"1fb293fd31e9ea71c25676fc48e2bc66ce9989759d7838ae8c5a0e7105742aa1e1268c9e1f3f96e89e487d9909b749b628fd99031bfd587504f8d359b153a2ec","ssdeep":"96:YQGLcC6HJ/nPRT+4wgQQubR0hoOyLpG+er+qmbNQ+9Aj03sjM8kQVnvkQxSJ04w:YQGAHRPBwIuViDmbNQ+XS7EaR","tlshash":"d7c17d0aefaf0156cf9f5e7170f463627f346ed3a0633a70a8a80de05b7e14115a454c","first_seen":"2026-07-08T11:58:06.214854Z","last_seen":"2026-07-08T11:58:06.214854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/demolition-queen.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.798Z","timestamp":1783511853798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/demolition-queen.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/demolition-queen.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkwdhhp5kq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKSB9F%2FrOZKg7JmQuYJWr8%2F%2BVgRmsyP3j6qmUW6Xc7tZEMB6pDdzDRLDY%2BTi7BZS3eQS7YsArmxiCyvPMaAPR0S3ACXPZaD36XUnnEOQdk%2FKPMkHzLRoPX%2BhulEync0yCiC%2Bj9UsOw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1c23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7226,"size_decoded":8264,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f1c5121adc12b6451c072c314355f56f","sha1":"698894f1ccf71950d13c6b1e5aef5cb543ae0c8c","sha256":"75541ecb474f1942b7b61a68c455f6a1a21d7685733be0fac67e33198028aaf3","sha512":"7ea9eb47320efb9be044aa09b2ac23fec79f3723fe092a1be768cb1fa96ad6bb975449dff650c8abe525fe44ae99f63e72345a637116fb9507c5d841779e6a67","ssdeep":"96:ZkJYBxQLvdDJ0af1zFSDqEvxaPKNBoaiWrClV8dR46VReC14E4PZIAUz0:a6BxQLvdDzXcxAOliuUKRWf1","tlshash":"4fe19edb17919067e92d453ab8610578b742a604326c7f9618e22f3cff386f0fec02a1","first_seen":"2026-07-08T11:58:06.21583Z","last_seen":"2026-07-08T11:58:06.21583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/winning/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.397Z","timestamp":1783511861397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\"],\"locale\":\"ro-RO\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Djp%2Bwx9h%2F3veDc1PZZTNFkovFUhlM3I7HrhK1IRTRyjChlkkDPcDuzgIKpKtINemtnVuzEFCr0D0vO8Bbg0kJkgXXXL4NNwSRw84u3uc7bGJO6J4nYs%2Bq6Ws%2B8qpTOwtupIZcEC8DQ%3D%3D\"}]}\r\ncf-ray: a17ee9adbcf523eb-OSL\r\ncontent-length: 651\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8699,"size_decoded":1644,"mime_type":"application/json","magic":"JSON text data","md5":"a5113507164224858c6d8c6a1598233b","sha1":"b69018bf509b4f934a9dcca814828e5a584332ca","sha256":"892157a9068571521db43c8e5950408ac673df0859a5d0e3e628c40d86746e2b","sha512":"b5c0ffe99c5050e5ace260e8e6b1104002ea10f9221f92d5431458a918a5f52e11f04f990eb4d3e90608f9ff5023b0e660a8c5afde4c64f5c4b2a16f95bc50a5","ssdeep":"96:pMfMZfhm5Mf4fhOUMfM7fhPPMfrbfhTyaMfMfhnGMfTfhdUMfqfh7YMfifhekMfE:pKlPoFu9WRs8dlzk8","tlshash":"850292566a62d73b76d360e0ccb7ffde1064a961642c88747cbf29a2c322814af9471d","first_seen":"2026-07-08T11:58:06.218992Z","last_seen":"2026-07-08T11:58:06.218992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/winning/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:48.397Z","timestamp":1783511868397,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"897\",\"139\",\"1687\",\"876\",\"2249\",\"1349\",\"2327\",\"1616\",\"837\",\"1099\",\"2009\",\"1880\"],\"locale\":\"ro-RO\"}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T23:29:43.573337Z","times_seen":17223052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:49.379Z","timestamp":1783511869379,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T23:29:43.573337Z","times_seen":17223052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/live.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.806Z","timestamp":1783511853806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iA8QTObwqkEtC95jiobapCxtbBjuvT1Kb3z3fMbDtAQzBiJXLnWgFsAGYi%2BOeiXALzuHtDsT549tKlXbcXVuVE9ZXe44u5QQSl9G1wpppGjg1tViYNDnamdlv5qFjxpbqysujDwRJg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52kiz87ul86j\"\r\ncf-ray: a17ee97e4f2623eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":1139,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-12T15:18:43.489072Z","times_seen":25,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-12.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.821Z","timestamp":1783511853821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiywb6jf2xs-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Mz1C%2FZPrh75bbEgLuKuLn5fs9WN3CisaSZppGemlAAmfUIYKSfYeRhaeJWJDW25H2TD0q6wG3Wo9GlQGOis6OowWcKM0V7awKHlHwhLyQI%2BQLXSz0n978jmKv9Bo10HWONL3JRodw%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3623eb-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3808,"size_decoded":2740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-12T15:18:43.712848Z","times_seen":55,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/frosty.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.803Z","timestamp":1783511861803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/frosty.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/frosty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgl3iopz5s5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdSnYTtSzKlEwoH2FryvJIsdcE5YMlHjP3tDwFgRaU2p3GNolvQDUHXBgGHhV3JULlt36y3zYQ0BzjdWGAu0mTn0A1kh7KAORphs4d9i5GuHHmO756IvAvQxhZp3%2BaBRreqpKc7h4A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee9b04d3723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7493,"size_decoded":8509,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"acc24e6e50df242d44e7cfb130a334aa","sha1":"d5beb4ce6d3899d8e8ff8b5835c8a6d0bd5898b4","sha256":"b3fd6579fc0894e1e49afcf820bd4b126d95a905516ceb0863d1270890ab7a40","sha512":"6ef67e26b52bbc288a173331eb3ab06db99072c2c5f7eb1c6f507d362e6108d492343c7d8f1a4a7a0434162da2f97e30df57d159e43840004641361278a2bc0e","ssdeep":"192:HqSYfZGiRRefalvg5AM4jEweWF0t5sF5cmi:HCfZGiefsxjE00I5w","tlshash":"b8f1c0036a252720f13f2a317b17e3c9f391622675222b534b688d9c0ff2107b3a44bd","first_seen":"2026-06-01T02:18:17.516038Z","last_seen":"2026-07-08T11:58:06.223325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/brave-mongoose.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.809Z","timestamp":1783511861809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/brave-mongoose.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/brave-mongoose.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgnvjhxyisi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uO7fv3wwtCKiW9ST8JWMi5dZYlKItjF1P6OMDdVNzQiHspMeb3qkNGsXPNSk9b0PqXP67j%2BIHX46z9z%2Bz%2FM1mLswsMHxhj2xLIgRP5dMHswE28KTze0wEr5OcbjDMsFNOevI7bydfg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b05d3823eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24354,"size_decoded":25380,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"74ff4c1148f8ab8d9bfd88ead4ae7e6d","sha1":"051482b743d156c5a879d70b42092af22de32f1a","sha256":"0079f75fb720ba202d1f0abad28a59b294e5b4f5b7cc4a9439e8932f0b394d00","sha512":"c97819b092d1966932fb7923769a9a664edbfd53da81fb0c8c7a4afd1fb72a782fe56720dfb3c2d4ed9d70c63143e23fbb54117eed73857d07e090a3d7c6c51c","ssdeep":"384:FxiZ4Tmp6M2drwvcCCiPB5skcGlYGLkHPMTdXmWQmx81qdNJrGW7eFBvx630seO8:FxW4k6Msmcy5DcGPLEriW1++W7eFBZk8","tlshash":"84b2d074d3587a51f5abb8313c08a63baf2de498390d8a67b2469cb17b24d3d21d003f","first_seen":"2026-04-10T10:02:45.688164Z","last_seen":"2026-07-08T11:58:06.22386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/wild-orient.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.817Z","timestamp":1783511861817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/wild-orient.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/wild-orient.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\netag: \"dh52kgxo02mol53\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NF6bUE%2Fo%2F648zztUru4maXtaEaCd8ZyXR31hwyF55bykmHPFwdzOBQaoiDBTUVEKjvkO0k0MnnLzzKZ0bzjHgtk0uKS6sfRCcSPHyncoE1hqeIZGwsNKgEXADDzltK4lSQv4P5v1YA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b05d3a23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27399,"size_decoded":28420,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4d2e42573e74fa886c870bc45fedd5d8","sha1":"74f3cc571c366de08851ebd4abe86f5aa1991039","sha256":"baf03c1bce1e687b7d4713c41a323d9f44bcb705fc3ff9f2bae475747a937a20","sha512":"363927188a766db05e66ead12ffc2f2b4637702d8a4bec4d33e3a2412f813d44f6cc2c4e6a9559b1a043778fe31c704660c256558b5df9f4cb6a224a74ce05cc","ssdeep":"768:J63KjXVGSoDGtcB3gNcKCPi7+Bo+jUJPL:E3qFoKtcB+cxBo+jUJL","tlshash":"96c2f21d67e15e36d7ec0af61628f72e2302eda0ae780553e9c1115793cf2d05ae262d","first_seen":"2026-07-08T02:30:26.281853Z","last_seen":"2026-07-08T11:58:06.225062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/mclarney.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.804Z","timestamp":1783511853804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/mclarney.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/mclarney.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kglht36j5h2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNZXPPdpdr8NwwAygKXmlN%2FELZROl5ncJshmZ00hHGn4zCZcmdZ0ItX6NrT3hCg70v9hwNNw5k68EXW3izxzNZLyRwcs3lXU3DHSMWy9QPwVzTSrCrmLuXRbaWa0VHZztqhs4DE%2B5A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2423eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7094,"size_decoded":8114,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"e2fae014ce98abdccd53eb6913eaf56e","sha1":"8676aacd68be72e525e7941eefa5c4c2a0fa7a59","sha256":"4244ace8b66cce987c7479b852ce53cebd40c4e1fc5f60ccac899a6e68fb3f37","sha512":"bccb1a43a0150e5f594b07c86cf0972a92cbc268e295254de335c4e531f4380983e464ba99a3487bd6b434d7b70e343d4fa85ab3202c7aa79467d951431ac54a","ssdeep":"96:hi+zSscafUolec/GBawnTzw0Ix8iBW9P/zJvXZVGf0RqdM598ZKupPv0V:hivaTec/0Bknx7KLJRscUOeMUP0","tlshash":"06e18e55978a88b5debf1c738c3eaf96fb64c5089146cbde6215a3057f3bc310494819","first_seen":"2025-09-23T10:56:20.280673Z","last_seen":"2026-07-08T11:58:06.226043Z","times_seen":4,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:40.375Z","timestamp":1783511860375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkdDbmOw6ginCrT4STMmK0Tu1Yz7YgkJZLaaXjM9ZOjx72YimKa2mxXyXHavpRu%2FJMSNO1yad9gr%2BPOsfULar1PEy4HumwI1dokMsHJYSkqvBRI10ggFJ83pD71eADRIXDxeDlUQQw%3D%3D\"}]}\r\ncf-ray: a17ee9a75c6023eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":1052,"mime_type":"application/json","magic":"JSON text data","md5":"73b7394faae84f6a47e82760b78c740c","sha1":"b33834154390d90404d8d42c13532911089a0254","sha256":"79a89112f5efb0ceaa61bdcc514b6c4b62a61bc626034af4bbad38a47427836a","sha512":"fb83d6014412fce574ae097311b66a88b019787386345ee4db0ac5dbdff1a0515590e239bb715fecd2979a92a32336c877ec45b77723555613f13708a4161848","ssdeep":"","tlshash":"d2b012f9521454de05bb1b00590e33d6356c0e4741944c0073d7ac815f600030413f48","first_seen":"2026-07-08T11:58:06.227512Z","last_seen":"2026-07-08T11:58:06.227512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/enchanted-fairy.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.832Z","timestamp":1783511861832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/enchanted-fairy.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/enchanted-fairy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgq4ifvupf7\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67M1eKbhWMzjJj6RxyN68LD908w28kW4ZRSxiVu5ibCVSYVnOV9fqcamO72hj6BEV2xve3gOKpYdPSXoIuYyDhDl1CbqeYIJd8SNjQ5Kh4Ja%2BJMNG2cGqbWgquf4HVrZYT%2BCPKd%2BTg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b07d4323eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32947,"size_decoded":33974,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"802b169e476be4e182a9821310d6cab5","sha1":"e0ce05bd0aaef94275e9b6410e4dfaa3c4066f5b","sha256":"c20cd9a568efa9114b4e0d5a5871e04be6a4109e0e74956c319487d33163752d","sha512":"2b580d4b09f845f669c949a6a91e89399e5d47c286562ef013924e1b1cab9d519131fa84e479e56d5986139d47db9ba56fee9f986dcbc41dcc5e9423d82f96f9","ssdeep":"768:OqURy98ZR+ycLO6pruBDXTYg03D/j6IUGagVltmEp:5qZR+9huBzTYL3DGIUG/ntb","tlshash":"f5e2f167179caeb3bc6d000bb0a24da69fc93d4c45791d427e3ed20a0fb09e1251a9dd","first_seen":"2026-05-02T07:27:26.339267Z","last_seen":"2026-07-08T11:58:06.22963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/logo-69b94e983b66f6.47841246.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.765Z","timestamp":1783511853765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b94e983b66f6.47841246.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/logo-69b94e983b66f6.47841246.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc5rd-br\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Bjk0RnaH5fOxY3EQkkQH%2BbnFwAvmj%2B3NIXBGR5qtGZELO5CtftdkI7mz8wouziFcw79UGPojNfHhJzmIObNgQXv%2B%2BsDRbhV1Ym5t%2FXySLy9Y43R25jt2jerGBw6ni0odLXrGIGErg%3D%3D\"}]}\r\ncf-ray: a17ee97e0efd23eb-OSL\r\ncontent-length: 3347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7465,"size_decoded":4418,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93bf60c532d2c3f96b8bd29af98342ee","sha1":"7c77a2a583b1841af605e6a7d96f0a6bfe0a0d83","sha256":"15c3fe8e4a658db084d0b84e8589f61e0ce1f65ef0de286b1835f6549400b085","sha512":"10801879dfce9354420cfc48b66a18665050ac259d76314d7c51de1b137f5e4c78b0d7b3b4765805a69a01e7ffa58719faa22070d50e5e27ce29a819f0e14999","ssdeep":"192:kKAow4/s+pbZ+2A+tjEPrFPZq077e02qiw/DoVEYbz:b/sgbyvX0K/cVEg","tlshash":"1ff192dc1f796ee889c88bcfbf1260edba17e1b289560e05c29c1f5925c2c6c9905d93","first_seen":"2026-07-08T11:58:04.216325Z","last_seen":"2026-07-08T11:58:06.231011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/play_icon.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.807Z","timestamp":1783511853807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kizall00jl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXKQQ3D1ZGU6MNjKsh%2Fy0vp8U3E3nAa7URTlZo5CoaJPIGSBxizATGtYAtoTjIPhnc3mw0YWegKt4PoBv6jQcDAhBebUBbYcsBE0KuGXatrIe5mwTMUPyciokdVCqwF2r8%2FbtvNqBw%3D%3D\"}]}\r\ncf-ray: a17ee97e4f2723eb-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1367,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-12T15:18:43.660831Z","times_seen":31,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-14.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.823Z","timestamp":1783511853823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiywb6jf2nr-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvY%2BYgDTpZgQ9U9K78%2BR%2Fm8aDbYp9v1RzDjWTPvnIOAZHe1uxCuUW%2BC1oSPLtKf52KJR7FdJ%2FmRpRMupnB5o1thWO85aYBmchBn4X8SguliMh9vuzHqNXCTMM3IuxnQWY288III2Kw%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3823eb-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3447,"size_decoded":2417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-12T15:18:43.875678Z","times_seen":55,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/5.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.830Z","timestamp":1783511853830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyfn1o4164-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfKamYZvjdlqsJ%2BivLUWT10OFLoSYgWmuZlgfHNTE36rXvEfcqw%2FaWI%2F1H2RqRuZX9sECR5kBqiWdzwBs%2BI1jR%2BxP7TdQnHdlnyBYxkcYKwwMhib63kmq8c%2BTpMBX%2Bx9CqyNMzFWjw%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4223eb-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1807,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-12T15:18:43.616033Z","times_seen":48,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/treasure-of-the-pyramids.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:44.709Z","timestamp":1783511864709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/treasure-of-the-pyramids.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/treasure-of-the-pyramids.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:44 GMT\r\netag: \"dh52kgx06qj2pg3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Teu62iDoC%2BdZs3Hum1R8HUPv%2FZtVfgEIYxIMXS%2BOz3pwWNFHUs%2F6x9Z0kAI9EmWNJ2yXZyDIh15QXRZtmSOBYc5T35jWbpP0hvs3aK4jhSlSZBteoCxB0JRQ0Oy3CrrJkyFxSOhNmA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9c27eea23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32979,"size_decoded":34017,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"30c2c8bfcbf36a45434a498eaf13cd6d","sha1":"eb70d6ac1f329953f59818e145c13b757e5b372d","sha256":"f5bd425437c78f12a1b52f3c91eceb6a79378a666c37bcc7fa8500e5249eea3b","sha512":"ed2bc34de3e5d2d7d4b4525074a08858a1e347b51ed7ac02e4a25377fe037164f9a86014bd43ebb093021feae259656539b483074f1f9f62083a905209e0cd3a","ssdeep":"768:si22xUskxW/US7RPTvkIKtwD8+NxrRmr/resH4:52bZMtZ4du7m+sY","tlshash":"9be2e0b8b32d5923d63e01a22c85bc82cb51bd49fd5578933981a1d55f3f06b8b29b0b","first_seen":"2026-07-08T11:58:06.233659Z","last_seen":"2026-07-08T11:58:06.233659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/raging-rex.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.783Z","timestamp":1783511853783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/raging-rex.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/raging-rex.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgv34gmzo0p\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MX1JI%2B1K83fA14t6YzM7pfntfstq%2B7sKpxne2FzEa1ehyc7RujhTGSLshk55P0uP%2FX%2BlQmD3D4y491LF%2BMBS2a9cfOoijr6jo66EImnVlV8Y4FCr8oWYeURrLsWDe2XihJ25IYVqSw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0d23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31129,"size_decoded":32155,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"828acbe7ea34fa1ee4e1175f02dfd129","sha1":"2fdc70f8f74cbfb7b427bb5a7a2c6d9df8f1a085","sha256":"7ba49b61e0c604ba249e979993745f2a99ce1af8a4966e34d1f9522b9d1172ea","sha512":"1f9fe2c30e3e973032857b8bcad133ab6d25ae38212aa74fe3c45ab01b21e8e8d8a2e05b342447e479df64667f7c1e8ea26c93c853a4e549006d0c9f0f5789ea","ssdeep":"768:utkqicIxVe7Tdr1SQT5d2PVm/dky8na1zJ4CNzQe:utkq1REgutBa1Dt","tlshash":"52e2e18c4a8de978d46fbfbd52a14b423154c6229a346f435858b05a8f7fad003d27fd","first_seen":"2025-10-26T01:21:03.204608Z","last_seen":"2026-07-08T11:58:06.234672Z","times_seen":4,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/captain-peroxide.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.803Z","timestamp":1783511853803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/captain-peroxide.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/captain-peroxide.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkmujun7zy\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zS7F0nktgC7r9vIWvB9hZJW%2B%2FXdIdG1%2FfkiQDzR7z908wn32rVsmYlXlRt9BYIcocZsHSbartdC1z5isIVhQiyESo4XcJhm4q28PnsxcrXfYPRwt%2F2JS2W%2BaVyMchlCZu78ySpd%2FNA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2323eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10366,"size_decoded":11402,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ba5d2a09afeb5de6b611c5015b93bc90","sha1":"cabed160341a6302c6be8d0ecd90caace06be6d2","sha256":"3c008c3dccd184d37f9faf5bd9357a59f51dcda0e38ea15cc40033f0f89c1feb","sha512":"514b5cfb1bbc7f5c42fbdd45f7485913add2135d6bf00adadd14e6bf01a3d1a7a28e520f54f84cf31cc0c7d32a0ce7ff0dc2fd34a834fbcfae9ae78da2b1e1f8","ssdeep":"192:qgkyoxv3vH/fDFSfpWK9rNRX+Tqi6VKMuPw+P7UrXYA5+6zPH0rnW:Qy+/fLoxR9xO6VKMObyXdg6zP07W","tlshash":"cb22a0032be8a980d3b89df3a9479f357da80cc4401590769697ffde4f29b0a73842d8","first_seen":"2026-07-08T11:58:06.235256Z","last_seen":"2026-07-08T11:58:06.235256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-7.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.816Z","timestamp":1783511853816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz12ncy1f9-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bqm8E8bnCgSg%2ByozyGAj75KzV7rCLRO8aEtOrZCXOLCr%2FN8zZZIX238LbW9GS2Be6xgIxLHa%2FYqZlOf3a7es%2Fd1%2F6%2FWRtSica5Pfw4y3HnnT3JLsU%2B8Hi%2BjGQ98Z06s0sdmzIwKSbA%3D%3D\"}]}\r\ncf-ray: a17ee97e5f3123eb-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1845,"size_decoded":1913,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-12T15:18:43.498877Z","times_seen":55,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/2.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.827Z","timestamp":1783511853827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyavkul17d-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLIs2TDzURcDy4qyy0%2FFzIgvgm7mbDv8035HIJ%2Fh30Gs4n76NCtFRqrJu%2FQlpRvFTLm356hv63LtqZ40yIGwXTRzOh7Cq1GnzyXGCJNKFrtlr5SS16PdEIQg6WLUL0Df4d5PrrFgbA%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3f23eb-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1644,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-12T15:18:43.713965Z","times_seen":64,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.214Z","timestamp":1783511854214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52n5630j6dhf-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8t%2F4w%2BSbPbxBmCt8fSU7vGvkZ4G%2Ff%2Bb4wFgTfesj79SIfJ661i4rPAjZvi%2F34qzGSFrGzmPHuK%2Ff%2B4StxjZOuNCyABAJdW7%2Bo0DowGIF%2BiytcpDFKXDmDF0yQvgb%2FqlSHsiFUxC9w%3D%3D\"}]}\r\ncf-ray: a17ee980df9123eb-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1360,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-12T15:18:43.81926Z","times_seen":82,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/winner/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.401Z","timestamp":1783511861401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ro-RO\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"163\",\"580\",\"475\",\"558\",\"574\",\"154\",\"928\",\"328\",\"898\",\"125\",\"896\",\"675\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:57:41 GMT\r\nexpires: Wed, 08 Jul 2026 11:57:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEuQrMo2O%2BVU%2Bho%2Fbbqp3uzLYSjx1B4evdMGJ6cQT%2Br5XlM5gu4gU8doMOYr1xe1s8tdpjsJNwtsTJ6DGgGvHvjXPl1eIX8kp%2B90JqKlIHQmrGm3W211ycr8amMXh20LEs%2BYbz6LZA%3D%3D\"}]}\r\ncf-ray: a17ee9adccf623eb-OSL\r\ncontent-length: 207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":520,"size_decoded":1204,"mime_type":"application/json","magic":"JSON text data","md5":"a6ddc38bac20589b3ccca11bb174a2ff","sha1":"80471f51a0147be2bdf66cd2778e4a22bd125cca","sha256":"8e5e1bf41b0c8c8ee929417f7548e59cfab37d664de6dc1ee45613eb3c2f1b52","sha512":"5f7913323f79de090b1dd85bb81a21754791496266b8204e6cb0aa38e5143f2cdf37f605f368873bed6b543b1322a9578ebf6a1b40728a40e62bf27900f4d65d","ssdeep":"","tlshash":"4df0a0236a11b23fa18300d0dcb7afce1015ed52952c0874bcbf19a1d3355106e9870c","first_seen":"2026-07-08T11:58:06.238745Z","last_seen":"2026-07-08T11:58:06.238745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/20-star-party.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:41.839Z","timestamp":1783511861839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/20-star-party.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/20-star-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:42 GMT\r\netag: \"dh52kgmhj3bygk8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDDtdZ%2F1XKzxd41eu6A%2FLvn%2BJbqXXkU4i%2Bjbeyz90TvIEUhUPB%2BOnnMLSNXCup28T5CrmnUkIEUQ%2FaEronp3OkDcGz%2B8PGrFxkalZBI3vQVDqOy8omnKgyMPkxLlOayM8gBhbg2moQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee9b08d4723eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":22497,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"22f963d8193c483515eb9f58aa0a8f56","sha1":"939c9efd7405e21b197bf6609d68960501664a41","sha256":"566ae2e4c096060e0d892d5daa2dc355cf5f3136a9f1d0bab295ea1ec1d27d9c","sha512":"f779d01b7b2acc753e72deb75269008fd6f07934fe86b42a106ab312c4a2ef3d2a9f48f673d17717a4eecf9883f5364880f437c87d43b5e17f01e4bb116c9dcf","ssdeep":"384:YMr/dcZTWhelr/SwFONRGWmuc6/izCcbzhA1P/9vrwjoQgH:YMRcZhTSwFwzDcdzCOOIjoQgH","tlshash":"e4a2f16acf3cc23eda7f2d22a65bce5727067e6d2f00751733649a642b7189444c807e","first_seen":"2025-12-20T02:09:47.751169Z","last_seen":"2026-07-08T11:58:06.239659Z","times_seen":4,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:57:29.021Z","timestamp":1783511849021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 72\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 08 Jul 2026 11:57:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: enb3316d91c244621de710f97d49593f78\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OkV1UdH3bAYiKViFy9rsyeBnuzihiE1lzBokseZsGtTSFZSjng6pBRmGGjzPXMCm30jQde7P%2B9nD3mq2ec6mR83tK7qK2MK2es1lpFnwR9cJrh5zLbRRURzIOz7FvBgTq7lJqq%2B7jQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ee9798e5323eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":157803,"size_decoded":39070,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6627)","md5":"98685ea18f15e3928b48558952cd3fc5","sha1":"28186cb9bd6cdf029b1c58c4f6ac37d456627669","sha256":"6d244a677d9584717f6c40e7049c7f4b35367888f91efafffea96f5027cf37ef","sha512":"d2003b99de41ef7a6ef31c33992a9822c53817418b339f0c9ac4d395f7dce5e800c7e5be4ede3cfcd6eb03a768f7ee647754cf39c0bdf59d0b3148caf063a4f4","ssdeep":"1536:eiJVLKEYQ6sq0IuEucMa2zjszRSSw9ksrovk2aVfiKr30KEf64:eiXRYQlq/uEudawcRxkRVfufT","tlshash":"4bf3b6d922f059a7448381c27f212a5b3ed6d513c9468544f2fd8fe91fc2c6aec27ac9","first_seen":"2026-07-08T11:58:06.241976Z","last_seen":"2026-07-08T11:58:06.241976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4571,"timings":{"blocked":-1,"dns":4007,"connect":17,"send":0,"wait":473,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/hockey-league.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.785Z","timestamp":1783511853785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/hockey-league.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/hockey-league.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgsb3nezr8c\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=At1VmBOK7GhqPA2iVNVRbAu4PkTqiVT61AXAjeeqdZzkTao8g1XLZkZgKkuLQnRaDi8isbn%2BhiCiIFxajsGjPwxRrF7TpUo3YHZQhLol2MXFSbf%2B7XIzo76mKZR4LCQYLzAn2l58SQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f0f23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35292,"size_decoded":36315,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2f65e6c3e83b33e5339256dccaa5ad3a","sha1":"b9b29c45e474a309cca2d968a81ed91e65b16319","sha256":"93bf628e6723f8663011b0ff73c6d00adedfa0e893a5ea4392aeb9e52906f044","sha512":"0693dfba52d937c739eb73c600e173c1e3ed97ee3f96984aae1dec1c87399e34dce1726a4725626fec3049717594925faaec483bef8c93d944e3f68fd8b8001c","ssdeep":"768:2VmamqiBhJSYqh3sf0/I+0/w+67xYDC/JbYdzV6:Em7asV+0y7sdzg","tlshash":"45f2020782943dc63e9e84610d650984e9ceb926179f6837fd482914eb3c792decf4eb","first_seen":"2026-04-10T09:57:24.666689Z","last_seen":"2026-07-08T11:58:06.243218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/favicon.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.884Z","timestamp":1783511854884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:35 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEhq%2BH1pl8kfuoGHvksnYcYmvthLPFdGcIX7X3iGYXULKQxya2cGbWLYK5LFmGAaxsxUU35SICd3vdmwDXxzFWUJZqJxBxDUF9u3lM2aZFErY7P2k0KWeTNtmZCV6z3UX06t8tQruQ%3D%3D\"}]}\r\ncf-ray: a17ee9850fe823eb-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1610,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-08T11:59:44.460312Z","times_seen":6,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:40.370Z","timestamp":1783511860370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6zohjd4BtuXpcmwbuOVVOQl9b7dwSTpUQmSrdqN2ZYamPw%2BZKYJusdX1Cs0YwglE2cxYirPPd%2FJRy%2F7Jcsgx%2FUL3LwPcCtMedcnco6w%2F0LmzQxQLC3xKG0tyGa0%2Fs4%2BEA8dTs%2BLYg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:54:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh52n560mspw5z\"\r\ncf-ray: a17ee9a75c5e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1193,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-12T15:18:43.61701Z","times_seen":100,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/eliminator.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.796Z","timestamp":1783511853796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/eliminator.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/eliminator.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkyr7wg52p\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHDqZ6Z3cTG%2F%2BkahRc5i3qDcbTRBfnaVP0sxl4BE2nCyJxVlqmtm9dNWXF1zRp1SLWAIdawji6BVmORmKlGDu0T4P0z32Tdn7oMSCqwL71HJoK%2BNaxlE7b%2B%2BIJuymWU47woZGpi9Qw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1b23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6577,"size_decoded":7605,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"0f538a4c4e88c1baf5aab09caf30517f","sha1":"04cb62dc25b8b6ff61c6351fd45677e2ccf8ea1b","sha256":"081a38e664dffadb1d1837decbde0577db4fe808d10879b5885e279d238786d9","sha512":"3c23968aecfc777c19c5fb24316c2716de9c13cd71cf5bd793955cfb477937340c42c6b136ba24cd642952ef52f28b94db53d04ea8252bc0647172cd89b9359a","ssdeep":"96:X2mekQS0Tr44OClbYcSOR/VAcIkQ+3I6F2aIFEMgbw3Oce8NwVrVVXjBnHG:EHNdOCV3FtISUF13OANwBVtBm","tlshash":"36d18dd0b25963c5e80f79b79b9130f0b6c15c4aae7c1a202cac95705bb59c2af9b462","first_seen":"2025-11-17T13:48:13.432325Z","last_seen":"2026-07-08T11:58:06.246142Z","times_seen":3,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/mctee.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.803Z","timestamp":1783511853803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/mctee.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/mctee.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kglht36j5jp\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa%2BhFdG6CsBjiu1vsYHGMix606LNTFT60hxkjx9CncZm6Fj82p0%2FjW8dMKUDgKbUgFW0vwb6b%2FW2bImEbthmx39GrzLO5WfzmPmSRQhWJ1RWrjl9LpRjgtvy5IxWOJkdB6ZftcygYw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2223eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7189,"size_decoded":8208,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d7a23800f78ded8505c9839e49e95a19","sha1":"111c6389cff2174f3c4eba3c1adc6f1cb188cd40","sha256":"67a5c3fc4fb2bffe8645f10a533cad57457a17116c2bff731ab44ed7690c0ce6","sha512":"ac78bc84d357def090eff81ca8db3d12f027f58a07732cc185921b7cee5dcf2dd92a5c8109c6c8be4ee6ee38effe1418ca2a3428d3285df4b0e022d8fffb65d4","ssdeep":"192:uzbnjAEcExgkqon2PXnaRQG3qOG9iJBaq:u/njvxgonsXnaSG3hFJBZ","tlshash":"b0e17d42530b0c06f8ad74b9447621be932cfa549ee5175b22d4368a3b0e6d5cda09a7","first_seen":"2026-05-02T07:27:26.306864Z","last_seen":"2026-07-08T11:58:06.246674Z","times_seen":3,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-17.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.826Z","timestamp":1783511853826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyyowy72dl-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BB716s7D0Lyf8Uq26e5DAw0K0yLXusgZdrLfjwi%2BCggRFss2lF4e91aDq9oUiOD3QQkxH1VaJzoBvXaShw2SESGqHPN6HtCWEIMutlbGmX0E0GcKpbMo5FlBaAr6E9YYtlPaMStrw%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3e23eb-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3081,"size_decoded":2392,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-12T15:18:43.780297Z","times_seen":55,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/3.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.828Z","timestamp":1783511853828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyd9b9c11l-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpzkmevPTBslngnogLGpvaLC6tv%2FgaX1WNWHWbzQYsYKQKKlQhJQH%2FoMmHMx7WvaFRs7tdpKLlL6rvPvqFwdeN0xu6yTh6uCLb1GEUOVu4DVtfYagYExryI%2ButlvjRBJoeWo5bX7Og%3D%3D\"}]}\r\ncf-ray: a17ee97e6f4023eb-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1716,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-12T15:18:43.661585Z","times_seen":58,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.778Z","timestamp":1783511853778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/jungle-jim-and-the-lost-sphinx.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgt8fx5ngqn\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxadzwdE6gWbwRPmO77l1GVZkuQC1aEIwe5S5um50eIQm4%2B8ucWTSz8H6EXBpibBwU8xENzXLKd4jdXm%2FlhXfC0cYACiOmYBsMda5AYrXDVCMD2l9TPoGKhDVo411JZb1ekNZepsfg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0923eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21695,"size_decoded":22735,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"aac66422ab6f35dbbebbff9bd257bb4f","sha1":"5a3a33f4f8ae36933ce0802281cc8d23744acb65","sha256":"813333379f6e408afabbf3280cefe7b1f26f1510e3356443f15aa84a8e629879","sha512":"d369278d2fa18d49ebb46e541096cd86c70fdbf988c6554c34be4b6aab56d94b0549c845b250ef94f7350eafcc80250953690d01ac13e118a55f96dd288a8ad7","ssdeep":"384:F601+vPpC7fprtox83epnSUTHXuWwtunV+2lxzjURoNEyw9i/V2:swPox1xpT3DVbdhNEyb/A","tlshash":"bfa2d1802aebca9cf17d93f9574fb12c531f100aa9b6570e1a284a6053daadd1cdcdf1","first_seen":"2025-12-21T05:00:13.775322Z","last_seen":"2026-07-08T11:59:44.440851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/fire-joker.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.787Z","timestamp":1783511853787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/fire-joker.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/fire-joker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgqisucfmkc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtsgGM%2BtR8wefAkAYS84n1jlsrUNp7Az7mvS0aqSSIF79zLbJj9Ny7vpV%2BCkll05t3vUepUV%2FLZQtMRPUWAFZfZayQ3yGAeYIJL1GjKI4t0W%2FbJxNfM%2FXeLvLd4zzPo%2FFzUA9ckkZA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f1123eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29244,"size_decoded":30274,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"68db784ec01bdb98fb014f116da94b67","sha1":"7e54b36d79ea8ddad1be3955ad917b95d1458ef3","sha256":"7f65ed52b30ef5ba519d7f9d40f3d785185497ef9ec77c87cc8fb64331da0bd6","sha512":"19a26d0f246ce1e17449bd0a80ae41365c0bdff83422d4b977cea0cf35b639d35439dd41af21cd6a8b48737f3d9b5a816f5b32a6892a59b276cd5342a7c1e94c","ssdeep":"768:ziwMn0JhsfHOHcyNnQzA5C0dxQ+ZCe23xR48jp6FE/N:ziNZ2HvNiAM0bCbhR4LFiN","tlshash":"71d2e1570a784f84ee5f011d5190c236d99b4f828cea039f6263b7de07e0f667b42893","first_seen":"2026-04-10T10:02:45.703842Z","last_seen":"2026-07-08T11:58:06.252078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/ajax/game/","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:52.379Z","timestamp":1783511872379,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 130\r\nOrigin: https://rainbetcasino-ro.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-ro.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"exclude\":[\"500\",\"1730\",\"2381\",\"189\",\"2617\",\"1392\",\"748\",\"1625\",\"879\",\"113\",\"720\",\"1258\",\"810\",\"523\",\"2255\",\"2265\",\"942\",\"2062\"]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T23:29:43.573337Z","times_seen":17223052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/play-green.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.774Z","timestamp":1783511853774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kizall00jz-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVQpFdsvx3tXn%2FtHXrcrgk8W%2BMAJ2EqdIAtBnv%2Fm3Rfr6BFssq6gU57kjnuziLvZdaMPxpecqJy7rSZL3S1kJ2sXuh6UQ%2FHpgYz97f8uVUDrXnxKGKiIzcwn39VGwdx0dtgPObRmNA%3D%3D\"}]}\r\ncf-ray: a17ee97e1f0523eb-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1373,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-12T15:18:43.51817Z","times_seen":25,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/phantasmic-fortunes.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.778Z","timestamp":1783511853778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/phantasmic-fortunes.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/phantasmic-fortunes.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgur7sl6k35\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BwXAu04l3xAXrNTVOUQTBCAjMIcYJVWj%2F25icUSKKtw87lFPF9FbCipH2tPipDHh3Bi2iTzJlx2%2FhzHJIysdvlu4cgckyQVDGbKlbKOxOsWxSIWe7neFZNBAK5iMYTwHYxdV9tbpg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0823eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26033,"size_decoded":27062,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"61e6d49435dba609b9ccf63bcac712cd","sha1":"34eeb374bf0f54477d3a1453c411c05dc1a33387","sha256":"6e2b25b7b22487c3f49182cf721c2a89db8fc94135a5e815b16668adfcb17912","sha512":"40ba999bf02a9628146a6d9af416e3eb162b2ed70ac059f498beab944b7afc4369ffcf5227badbab197dc17229fc28dc3e4ea23e8c17aa3a22cb871b9595600c","ssdeep":"384:UYvpEfSWo2nbYYrHwZE4NTS0TyHvGtfh6KAm9OYyl6+c6AaNKSAvM3JH9fp64P/c:5iqW9sYrQVS0TyHQf79f9SAAJZP/7g","tlshash":"8ac2d0c71e0e43c3dc6f01546edcb121385da446ae602c17b4e66bbe6b3c4897ef6066","first_seen":"2025-10-09T01:23:42.720645Z","last_seen":"2026-07-08T11:58:06.253755Z","times_seen":4,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/games/lady-in-red.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.788Z","timestamp":1783511853788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/games/lady-in-red.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/games/lady-in-red.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgtfl4dxl9m\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s058i9ZXl9tg3hte5WW2npqwrPyoSwsAwB4bOXSf6%2B04%2Fjsf%2BUiFo3CCtRiTm%2F8n1bartWimmFr%2F47Stm87L74rjZUPoI340h1LaaUqlZzj96oSZn0INLRJCJ46N3Hauttsrjhe7nw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e2f1223eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27562,"size_decoded":28589,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"8f783400a7f17df251bf2b3b3b43b09c","sha1":"8aa5731de6a1230fdd9b86c164e13fac40826a4c","sha256":"d99f5c997d987d93eb8c33bfb0d908151c7fa894ae752e7447160c71ed5b578b","sha512":"223f6b92f8538314c2fd3a5dd5aac856a17d4db7598e94b4c2cbec6cb3142c6353799b7ee8b0728715858fa3ab6040d50d91c5a24c38dce681c5637c47b4c981","ssdeep":"768:Zj4aJVfo/RolCkVRti9MYMPkLxl1bcLS0Xj4y7zkJQFC:iamol3pSMYM89ldYwQFC","tlshash":"f2c2e003d92a48dd804cfb3811c09b39dc03ada1a79bd4e55edb3d323b68d63d0d24aa","first_seen":"2026-03-21T02:18:55.569133Z","last_seen":"2026-07-08T11:58:06.254654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/drift.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.799Z","timestamp":1783511853799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/drift.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/drift.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kgkyr7wg62v\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2N1vYwznSEPGrdCBULDp%2BE1xZ9jmUivf2Qg5wP5lJXLOt9eTSUg8krcS4R%2FTWkrtgStKz7eKHI2v9ggy%2BZuV6U%2BJh1bCirkETodDOn2HScO6Gwoj9OfhASZ2tP5CHZ%2Fj3RK9gBloA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e3f1e23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7879,"size_decoded":8902,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"63b1b0eb1d457610be5ed63248ce2d53","sha1":"c51dcd53e9a1ee9f4fae3f5b1f609caec0d7c067","sha256":"10e75365abd0198b53e269aecab2fe887f64f39952c07f19b19b3d8e8549153e","sha512":"1cde1de7508e249a3ab5083d45db922c79fd83bb28b0fa7863ab9af271d5c313d0ce696a6a073ba792c9c7284e1f2e8a138ea47bbc1e1644ad016e96561fda52","ssdeep":"192:Oes/ogNx0UmYO4g+iDpa6kVnNCX+wn2uwErmcAcl3n:OP/oRYOxHeVnwXTn2cmcAc1","tlshash":"c3f1b0af4e36d95aec1f0cf168e6aef644648218f7b535675c419036d32a1c386b039f","first_seen":"2026-06-15T02:37:07.681653Z","last_seen":"2026-07-08T11:58:06.256006Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/music-man.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.801Z","timestamp":1783511853801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/music-man.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/music-man.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kglk6tla4yb\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTYIeuaghr413s83y0x1MAHmLXqoh6u1oSDDJ6nH%2Fx6ZHtRmJSgd456bXN451799az6nAF5Q14WJhFZI5XyvshkmfiFx1rvPVQKd9qgmLajzk%2F4sYgwZsF36PnQs40p%2BybWBiu1aug%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2023eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6419,"size_decoded":7442,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"b62c47648d7402cbf2b593088967734b","sha1":"500bc1ac1d73de9d9d1fe836f3337b85cbed7703","sha256":"939f59e7a516f6f90866ba0444dd6b0b553165323ab0932ed209df0a48b2f188","sha512":"0e409d681e2801e01a5e05563c423f0d3f7e4fc0a52711d50a34d34239c59f2415505e536b16bd5f337ee23979127eb1cc4ec1bfde67c9eb7dca2ef7ba00e231","ssdeep":"192:1RtfiC6YLqh+1Bs7Tlz6b+mNeCu7SUXmy:VXGATeTlwNVu7dJ","tlshash":"41d17d10d7562c4de95f2ab6349367309b12af461237b65b1f931e09b3abdd20b98061","first_seen":"2026-07-08T11:58:06.257101Z","last_seen":"2026-07-08T11:58:06.257101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/games/table-icon-15.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.824Z","timestamp":1783511853824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiyyowy716j-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSP0%2BHCNHMm42pwdP8hk3RWwX3BskRCrl%2BVGpZ4zGUIozM02oc0NeQOsGzjM%2Bh%2F5zoi2CBqlO5SCoSpXAqB0QrC0R3qFUWp5QdiM7hNjryvXDxjA48WyamUjnuSSfpJfaFFePw%2FQag%3D%3D\"}]}\r\ncf-ray: a17ee97e6f3923eb-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1805,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-12T15:18:43.563971Z","times_seen":55,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/banner-rectangle-69b94e97c2b847.87137049.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:34.206Z","timestamp":1783511854206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b94e97c2b847.87137049.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/banner-rectangle-69b94e97c2b847.87137049.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklc2hhk\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGeM9BpWdGx0BPPJCQ9Jq4csYmszueEcP1c77cFgi5%2FK1daK8ru9g%2F8P8HZNcvhMpFw%2BdnTckHz9pg4oMxcemzeqxtNeSQKvXS80ZViutq%2FEO3PtYobn9mN3K7HfGJlojhZTVugGzA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee980cf8c23eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115976,"size_decoded":117038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"47622dd81fc798760c205c231938ed1f","sha1":"6ed8a09b7c230bba0b6bc8f28b64790c373d198f","sha256":"ace281e6168ce19d27d3628576c565bab0c69ecb0b4bb7f57057d1fe7ad2eea0","sha512":"1bafd37ac6bffba426e2937d9d98fc98f08e64b59ff7d9732022b9c0f5a8a24da0e4293a500acdd0428e83b276a02fadec0f7138cf68ba29f9aef4045816b65b","ssdeep":"1536:knnNDUtNDn47oTu+dBTxbjcmqb6oayPk+kqWbsZrPirXDeuP1HcV10LiGgNPc9AC:0DINUHSTxbj/2xkRsZrPiLT98+AC","tlshash":"4db31216a6e0070274d60958daff37ef5974ef636cb2c64e820b4e89f51d4e09c32a1b","first_seen":"2026-07-08T11:58:06.258564Z","last_seen":"2026-07-08T11:58:06.258564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/2026/03/baner-2-69b94e980bd838.41463983.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.771Z","timestamp":1783511853771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b94e980bd838.41463983.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/2026/03/baner-2-69b94e980bd838.41463983.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh54x8f4nklcc9gw\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOBCLQDsX5X5dQ93JeGvKNSSSMQ%2BJkelbj2RtZSBZ8fvMEkXYN9vV0XzrfrcAuiaLTQYkTx5ZMz4uJDXpWGDjTS75PxmSL5UN0E3KgdpOZtguUdMBjNA9Hu0op%2F8cSnPNOEIIoeZfQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e1f0323eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572144,"size_decoded":572051,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"b1436d626465ca9af9495bd74abc741c","sha1":"4810c9990f1226f706b91bd12711b0e89e1ca65d","sha256":"5f2badf7ae2ea93479c5e7fc860ffbc29f501c565a3cd723ea68dd5a594a8f8b","sha512":"e1847656593e83c8902ef542f6ff7df92c9076cf9c678287ce691216fb0988aba582e250bd8e12344a0bf9ae863a8ea103d62ba284d8cac450c7e69a6094d676","ssdeep":"12288:q/JJvlyXyyX86qLfw8m2k4aKO01ciAjtmBAyneO:qhGiyX8PL5mzoatmtn3","tlshash":"42c423aff72b41f4ab1c1620b99b20cd35f2378bb4c145e1d631a0aa9bf45572602d6f","first_seen":"2026-07-08T11:58:06.25958Z","last_seen":"2026-07-08T11:58:06.25958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/uploads/media/avatars/neutron.jpg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.805Z","timestamp":1783511853805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /uploads/media/avatars/neutron.jpg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/uploads/media/avatars/neutron.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kglmkk023c4\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2usbWwbl8%2B8Ilf7EYbwTe53mAPtlrNdtmWjVL8S%2FBxdLmbgIHS%2F9AjCdm8z0SC%2FDiq7LtxnzKE6dbRWBomUnr7zT9rydFfwXZDbpMg%2BbtGNdkP66OO8HLcS3SyokMGhEahatYemcw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee97e4f2523eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4324,"size_decoded":5303,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"bf072fa4a375e72a6379d34e41b8e064","sha1":"4ead835a6c7cd489361b36c91a5c6149dc6a0a9c","sha256":"0d22bda3a1141e2542a5acc66cbbc4fbd6bf25bbf5f6320677a97deef68eefa6","sha512":"272a171e3f7b30792c48a487e6128511057aa0b9d4d675d0c1a0daeddcb378fa318ee73495f540a071de67a4192af8a698d589fbf6e4009ba954ef8c20762ce7","ssdeep":"96:MPYQ7ODbdYTTdR0mGiApCkpovcaMPnaRhMNhi3bmM:MAQ7GC5HAYAyeSRCpM","tlshash":"f4916d45bf796305fa3e30ff8608a7098e022fd9657a9e976490190f179b0f20d5e2a9","first_seen":"2025-12-25T23:59:48.614669Z","last_seen":"2026-07-08T11:58:06.260482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-ro.com/svg/live_icon.svg","fqdn":"rainbetcasino-ro.com","domain":"rainbetcasino-ro.com","tld":"com"},"ip":{"addr":"104.21.60.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-ro.com/","date":"2026-07-08T11:57:33.832Z","timestamp":1783511853832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-ro.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 22:44:18 GMT","end":"Mon, 05 Oct 2026 22:44:17 GMT"},"fingerprint":{"sha1":"F6:CF:43:96:D6:72:00:2C:0C:1C:6D:A2:8A:7E:E6:6C:25:CA:AA:F2","sha256":"C1:4D:A9:32:87:30:00:6B:09:CF:7A:2E:8B:8E:A3:5F:09:61:E8:41:E9:B5:EC:59:45:46:2E:E5:A6:5F:10:42"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbetcasino-ro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-ro.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-ro.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:57:34 GMT\r\netag: \"dh52kiz87ul81y5-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DiDI5B8dILU2bLtFNbtkF02r6eq56VAd0lwkWMUmsL3Oss9P1koci0ghbn2x6X8ycVATLjgtGlNq4%2Fopuu%2BZap9KFFtDq3GMuFXU5ITnexAvxlokDQ%2F934XbX%2BPkD1t65uQHk3KrQ%3D%3D\"}]}\r\ncf-ray: a17ee97e7f4423eb-OSL\r\ncontent-length: 925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2525,"size_decoded":1954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0c05ebadf4fda67faa8b90d5424c5","sha1":"f81ff1ed17b5ffba223d3a06d1a3628fb198cec2","sha256":"f8dc8454be75f1a4ce991b485bbb1f1650428409c820b3d9b8540fe5a538dd45","sha512":"ff6e2ddf5f392b184b7d49f702e314ff8cf3af53e7eefc4150dd84a863a30eb627a9dc6f0174ed3710e72ce7ae9831f52bac374779670d653e3d78914bb63616","ssdeep":"","tlshash":"4d510ef3e2cca2d19003d7e4cc079831b59b6cf767daa3cb8272ed44ab30165598d865","first_seen":"2025-09-23T10:56:20.264777Z","last_seen":"2026-07-12T15:18:43.483834Z","times_seen":28,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetcasino-ro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}