{"report_id":"9569780d-a86c-43b6-abeb-ef4b65a957ce","version":0,"status":"done","tags":[],"date":"2026-07-08T11:55:47Z","url":{"schema":"https","addr":"rainbet-hu.eu.com","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.29.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-hu.eu.com/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"title":"Rainbet - Legjobb online kaszinó Magyarországon, bónusz akár 100 000 Ft-ig","dom":{"size":165164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4556)","md5":"c07ea6646e2954fc95b20a50bb30afec","sha1":"828e1d5bd11ba4de9e884d1846bc7ca28a22bc04","sha256":"66dfe098628573bbb66d05b345fd0d452c06a0d08d155e029b67780c95079fa3","sha512":"be5011540b7434bfc842b6f1b5fce543501eeaaf5c3a127c6523c2f76ba1f59a149d06d2d2cccbd5c3ed60917479e94f3d7a80f3b6c3fba98089ccb355a8a3ba","ssdeep":"1536:r+l10DQkpF/xCZiHB55Cej/hGyaq20LA+2B:uaQ0FJCKB5EsO","tlshash":"c2f3e8f912f049a7488747c76e612f0a3e95d217c95a0950f2ed8bd82fd3d9aec2390d","dom_hash":"domhashf60a4ecbc598b183320e509f9d961627","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet-hu.eu.com","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.29.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:55:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-hu.eu.com","ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-07-08T11:55:50.09774Z","last_seen":"2026-07-08T11:55:50.09774Z","alert_count":144,"request_count":144,"received_data":4381140,"sent_data":82820,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-hu.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T01:40:47.434609Z","times_seen":399059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/runtime.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-17T09:16:40.199202Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/app.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-17T09:16:40.316879Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf74e9b05e3a09683dcce05e2a6f62fe","sha1":"3840f30d6a49ab6f1b57d297fad73ae483cd4efb","sha256":"8488f6d032a7c3a912362a60ac81f6ddf06456b5baf71c798ee4da8b94afc614","sha512":"7d12958d1dd635dc9ff3013d57d904667a523a4ba8f900f0c0ff8bdf7c2296f63ecdf0afce32ff5a116cde1e84ea64b048e94a47b4971b5f11f634e4ebe6490e","ssdeep":"","tlshash":"7880000c00020a02300a3288e8c2b8820800000c33222ba0038fe0080a8a088c0c2c00","size":27,"data":"","first_seen":"2026-06-07T20:26:45.807758Z","last_seen":"2026-07-08T11:55:56.251156Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-hu.eu.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"hu-HU","filename":"https://rainbet-hu.eu.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"hu-HU","filename":"https://rainbet-hu.eu.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"hu-HU","filename":"https://rainbet-hu.eu.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/kay666.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.285Z","timestamp":1783511722285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/kay666.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/kay666.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go200s7us6cc\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JE8tiPd5G%2Fk7eqsAA2sXyFhgEuDGTaOQI%2F9INtp6i%2BiI5X1DJ8angVPNmltHcUGCLScuhJpbWo6r7dzpn6wQ2846E7KSuS1McZ4aJDcBuCRbJcQJN%2BzPpe2NchElb7EKv38FOw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c95dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8220,"size_decoded":9235,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"2caf0c8f30510a752579c2d0955626d4","sha1":"6c95b70816798b254c6c0ebbe3c7e1c04a83c7e0","sha256":"e4f3aa7f7d094cc42b3c2724367a2eae2fb5edf9858b43adcb8e525e086d2b41","sha512":"6b8c8fcc7d74a138849db11b7791812cbbe2b59ed43b4e3ba6e595de168f8de0b757ea6075a8b28c27503d724daca884c9335c4c81332f0f6f4496d970d9c03c","ssdeep":"192:5nIqcJOFTu31/eSPH3HfbX4aV/fZP+R3aBcaxa9UZBt0jjnQ:Vc9FWYH3/salfgR3ae85Bt0jjQ","tlshash":"f9029f52d7aee28ee1efb334c731449430109b69b3246aee31e63884bf1b8d12d064d5","first_seen":"2026-07-08T11:55:56.078113Z","last_seen":"2026-07-08T11:55:56.078113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/banner-popup-69b6d07f54a215.47116720.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:28.760Z","timestamp":1783511728760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b6d07f54a215.47116720.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/banner-popup-69b6d07f54a215.47116720.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:29 GMT\r\netag: \"dh3gzz04nbwg37m3\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgVVi7FTVr%2FBxHyemyAI%2BhX83SH54kE1SZ3yDKa7cIwya6FkhkDJteGn6yMRnBcfdwwr30PnPNeqB9jkFgBpVYH3VhBo%2F3x4bcLP6QhdaE5Od1BteYaFy8BSKXJ6yp93N8L7MA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee670c973dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149835,"size_decoded":150889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"b10c736cb28072bd01f5f1e28b2eb9f5","sha1":"d262dd99c02bd523656ba8c2bd371b4c7abbeb5b","sha256":"f63f07096341ff40c4a4efc7a4525920248a68339e7c6d1b1f09644f79ccb5b5","sha512":"143c5d8e4292cb7cb80c89907c42f1218fd1df98ec74ec40681cc6f17f0f5795a46df8994fb9fc8c1555b44eeb81fb9305811cb63532b53a65dc453ac2e098d1","ssdeep":"3072:7MiEZQQAsFcN2FKNCUE8gq7FACheaDMbtNEFxB7PlWdJ:o8seNOUT97iCMaUtNExB7PlWdJ","tlshash":"e9e312d0c7d90bca5b3df5f1a2b407cef1ceafa417555ae227241a26c8c6f882c9914c","first_seen":"2026-07-08T11:55:56.079076Z","last_seen":"2026-07-08T11:55:56.079076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/logo-69b6d07fb6aa36.25551553.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.255Z","timestamp":1783511722255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b6d07fb6aa36.25551553.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/logo-69b6d07fb6aa36.25551553.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3gzz04nbwg5ra-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvW29X7o0v0d5ombtRPZkIpiBhCFX3xtmhYx4h%2B5ECSBWy0InaU7tVGd9XBVlGnk7EIkT5bB4TGLAHrEkRwcXu8I8kpu0ze84CyO4MKo52WhfDmN7uiS7CW%2BUdeVDljOpNaghg%3D%3D\"}]}\r\ncf-ray: a17ee6481c65dfec-OSL\r\ncontent-length: 3228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7462,"size_decoded":4284,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23c748e348160289ecc38a4282aa680f","sha1":"96264af5927cfe40b7887f04f1a45561b8e32d74","sha256":"6a8a555c62485773a09b85b624e51299cea582e118b8fbf0f645e7e71d022264","sha512":"7fa0feb9c332b54554eb33779be82cca0e81372801c02e718249bc0348fa8ee9aef4a4855d16e1fe616b74382932ff1c61b67b4b227a789b5a9666965ef0abe8","ssdeep":"192:9UbeXT/clnP/C0wIWwtgXpZUg9FWLd+PrJyCZ2Ciu:pXLchUwt+wgnWLd+Pr4C4k","tlshash":"2af195cd3bb49ee9cd75d7e2ff0120687a27c0ba59858e60c1559b0d349086cdee8c8a","first_seen":"2026-07-08T11:55:56.080114Z","last_seen":"2026-07-08T11:55:56.080114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/loot-a-fruit.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.260Z","timestamp":1783511722260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/loot-a-fruit.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/loot-a-fruit.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go25z49h0hha\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTcDDwoR7nB4UUmzFHe2ffbhxbsGEAXmW6a9bx9gp1SAHoMjaUOG8aext4oJKlrHken7%2BDrw%2F7%2FSpWUEKsH7y7EBtzUcupryY3Xxj5ZddMVsV1vAQ4PiHTl8JdWyAxGzu%2FpKlA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c6cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22654,"size_decoded":23673,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"0f529314db585063bfb08c04f3bb702f","sha1":"d12be9a6e124ac114a4cadc0d1f286feb15481a0","sha256":"846e12ab138c0ddf3488c0e0e9618aa4305112707f8107dabaca684cf0c7af10","sha512":"a4955634061cc763e6b3ae85986ff4cc79d0151f27dc0b092f409b20c9d58668f694adba13c53eee1d814ace7690cb3a2562ca69128350ba32b87751235b511c","ssdeep":"384:xqBqqGy1S4H+39VaLqi8CJcFfl15jTQbsItnwT/jkvrZ1d97ZLt:xqBqqGyw4HwVa+i8nBlrjIsI5wTCjH","tlshash":"5ba2d13413618d36b65fa082ebc55b25f8251a92a752eb43b9b32efc776b0ed4242490","first_seen":"2025-10-14T14:51:49.272418Z","last_seen":"2026-07-08T11:55:56.081339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/four-lucky-diamonds.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.272Z","timestamp":1783511722272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/four-lucky-diamonds.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/four-lucky-diamonds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go23xaiiki9t\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCN8fjUX2AIbspZ61vQac9RNQxJbe0ouAtsnYB66n6Enz%2BMArO8rCcjxslBUw%2BX1LyVsSCK1HeAtUOxhrMl8HjRmyxukT5lkyQCVdAtkoGbAR37E9zvZ4dnuermifNFhKXMqLg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c7ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23681,"size_decoded":24703,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"32404c007a7f605de121c6eed271bf11","sha1":"4103f4d4e8552c61252fdb8f11d29b046372cb0b","sha256":"517ac16fff952f82dde621fbc111c881811931cdb5d07d71cd0b436e078a242f","sha512":"9587bc28d7e73fa74b5e41cee1f7a03703c02d1dbda2e71f64b74b4cfed0be65d5f5967161ef9dca755759a21bd581a745cde253686908a7a8e5beeb6f67b0bf","ssdeep":"384:iJsEdWfE2e7QdV83ZO7iPMc4R9Gt3141v9BgWOlJoOINpRpgocfCSfQ2VHFy:0SEImpiyl4utqDBkhILglfHfQ0g","tlshash":"6fb2f177808e2ae1f56c68fce528758b2f9806b456652f04ac258924d33bce2d1d4ae3","first_seen":"2026-07-08T10:52:35.034503Z","last_seen":"2026-07-08T11:55:56.082592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/silver-stone.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.280Z","timestamp":1783511722280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/silver-stone.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/silver-stone.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go20ju3764l1\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdL1DbC8ryy9pPjIoRxmGG4nFsK7%2B6pImm8quthzG0oCJetkerdDhVlAdQF1MLRH46vcNBChFf5Cf91kyiPYW%2Fl32DvI1NLN%2FjN2LunPsgT5UxDr1Y8Wm%2BesB3YhpFrMfcwYaQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c8cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5941,"size_decoded":6962,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"776fad16d2f9180829a6fb453095c51c","sha1":"76cbe20d957e1fb4b1921410932646ef9ab724ef","sha256":"f4fe7024bdb55f4943eb3584ac14cd0d3aea365703c0a08d8e5a63e8e71955de","sha512":"7a485392ac0e7e7069f188757d724a1252b956c858415bac5dbacd39e07ee250e5654fd23a4de0d58d97ad08619f52de74657a936bf7f4993e4074a21914e9a8","ssdeep":"96:zkJ2yKcUF2Us3OSa8QX/XeiRiLA1E+9tVUc8NRFdras2hT2PAVxd/tan6UyM09Rs:Ic/cUEL3On8QvzBkNR3UN1EyM0Ct","tlshash":"fcc17da67e875d49debd1c3075648e17b22cfa01a7ad54fb48234a284b680cdcd928f8","first_seen":"2026-04-10T09:56:45.870693Z","last_seen":"2026-07-08T11:55:56.083654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-2.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.297Z","timestamp":1783511722297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj1164-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5izI6v1%2Bj%2BTLox3WuzielR4sEk6Hpkn3KOWO%2FzfpBm0PMpIaIO0MLlpo4WiNpO1QZTxpmNLXkaCCFhTOOAhX%2BV%2BLnB4RLQDm21dfFNw%2FsqbMFB9PnnVNAzghe%2FjEntPoYMxng%3D%3D\"}]}\r\ncf-ray: a17ee6485ca3dfec-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-17T09:16:40.160251Z","times_seen":60,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/cuckoo.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.218Z","timestamp":1783511737218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/cuckoo.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/cuckoo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go22qfazpfli\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoHpKeqKRZYEuw6xMrG2PDltG3GA6EDfnyn8200cly3d5kUVS7PygdXBdh6i4ho1OwqSXxDXuwRlno07XvAOiAWGlmxgt8VR0n%2FECImiiBGpz7E%2BgZQMiE%2FJ6xHtCM1UhWLgsw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e60dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20214,"size_decoded":21225,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"86626181841a0d321210f5f772118d29","sha1":"78b3d334fa7a820c14542f5094ae96a370c181c9","sha256":"4a8f520ea3fb496e22c1e0535d2e369aa6d87e03f636286f2f724eea2e93699a","sha512":"ac6457ff957f35ffd6a6ca650e2159e25fc40b73e179543f7409192c28f17bbbcf2b3d58e9f9a8787ae797dab3c22410bdcc825a9463ece1f1f0d16d9b0dc3ef","ssdeep":"384:rlMvw3Td6ABwDLimDsa2vCfM10V5F0Yp4Lox/grO05KwT0GTzN77IVMf:rowFLa+Cu0fjbO5KwrTzN71f","tlshash":"5292d19d89ec8086e94d1ba3d06a7c9049139b82ffe5f3b6a571467b73234c577b0c84","first_seen":"2026-07-08T11:55:56.085221Z","last_seen":"2026-07-08T11:55:56.085221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/gunner.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.286Z","timestamp":1783511722286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/gunner.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/gunner.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go1zw0r0p56c\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adADZInMZb2c3krMHifF0FNjc%2FRwvkeOxiujO7pG%2FPoyiO%2FlvVhv6EW6hpNc4%2Fu0eAB5kCfr4q%2FQFJf%2BF6vvXSVl3jtQb%2BYGK3mMgLrwZUArdfEEAf4Lz02dHWWOzImGRFuZdA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c96dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6708,"size_decoded":7729,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f73068bbfd360f27ec979fd3974f0278","sha1":"702bf6a26f78fa19d7b4d9afe0d14218590d5f5d","sha256":"9df548b4fd6928f540e4c1533b542da9ecbbe437cd3b1d94c21b434a6f8b6392","sha512":"92134765d5456b267ca0c1269156842588d0d5beffaac8829e4d5a775fdee0271c08c8c7481530755149f74a58074738f4fbbae3ae97eb14d92ba49c611496cc","ssdeep":"192:EHxok8ig3wAQM0DI8X9sLrPN/zEJIjQcz6c+tJwFNDF:IjewAQtDI+9M7N/wJIjQIRys","tlshash":"afd17d093624a82ac11e0f3a18b8d7547b427fd155d437d72a5393ef3b37ed4a244249","first_seen":"2026-01-01T08:17:55.726292Z","last_seen":"2026-07-08T11:55:56.086219Z","times_seen":4,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/1.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.316Z","timestamp":1783511722316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu1be-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOn0da9m1ZitGei1O%2Fe6flphXwUO4j%2F9%2FmDpmdqDcFeNVz9rbHaXmdwp1KwwYaL0BjglWW5LVj9IW%2FfIfNbUeYQNnKjflMSnLF8rJOMmiChwFn67vv%2B4W3%2FbMBXmHGfgzaNNEA%3D%3D\"}]}\r\ncf-ray: a17ee6487cb9dfec-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1706,"size_decoded":1736,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-17T09:16:40.271159Z","times_seen":77,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/banner-square-69b6d07f636f27.42155685.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.118Z","timestamp":1783511723118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b6d07f636f27.42155685.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/banner-square-69b6d07f636f27.42155685.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gzz04nbwg2hiq\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvjC7ghSLdkGQmTTX%2BH49VxkPHVFFHMPxe8qWcxzpG34OYgZ8I35fJ94Nh%2FC1lIhUA%2FES4MzxRRU15rtRsdLakWyTCvrxSCDT%2BfHiiWAfQoJAVecLXyF6A%2F%2BCQjnZRE4GbvAVQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d8d89dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116018,"size_decoded":117074,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"4348f2624e75c6064368abff345f93a3","sha1":"090b3d5050ea112bcd4c67f6900b6b6c94b42323","sha256":"d77ab5687129fb69c31234f8ab9bf07d1569960a4f70316d12220e1908d8c115","sha512":"459a05fdafe3530b059700c5ed40210cc9732808f06ef4a177ef1781087b19e0d0512469dca5a79df7879f6e7b1514ba2b63ca153917d235eced0af6f79daa65","ssdeep":"1536:vVVy7LyMWZ7HaOVVnAVMXLRmzJmbs7YcVyw4RQ+z5hWdv8GlugIsON5rUuU84Qzy:dg7eMWNHaynAVsss0Y8czbWO6I23yy","tlshash":"7fb302254b1344a424336c3947636df5f5a2a7f37daa8b227979da72c204c87123cb9f","first_seen":"2026-07-08T11:55:56.087992Z","last_seen":"2026-07-08T11:55:56.087992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:31.767Z","timestamp":1783511731767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:32 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qy1m1%2F49csy5UHi1228G%2F4qPHfM5Khi8td8qMVWb2Zx%2FherRc3rjz7xwD%2ByjP5l%2FH%2Fq0bvBuSnjdgjT0deZ2p9JN18ivfXw8yLCNUFehuHFJB6%2BrCT2jQGOUqdzY8TsYS9C97Q%3D%3D\"}]}\r\ncf-ray: a17ee6838b12dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"79260b2548a89a97d8cd7c864dd7e465","sha1":"4d50e08507c2074995104a67dc545c2be8bc4e07","sha256":"56f22026437689d5feed5fa5ffe0d442144101cd3daf2661cb3eeb9025450c20","sha512":"acd6ed595ff0f0fe231648e0861fc69a0496cfb5f1197c3e4fd80fa324417fea5e973b30121c673f38a9b555fbcdd9fa93a986dd6e1523476f26f20a34c95f98","ssdeep":"","tlshash":"36a022ca8082080b0e3f0b230c3f30fc20200e03a0b3ca22f3c0efca08280020003c00","first_seen":"2026-07-08T11:55:56.088853Z","last_seen":"2026-07-08T11:55:56.088853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/retro-style.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.217Z","timestamp":1783511737217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/retro-style.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/retro-style.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go27d4o8zs5o\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGuvGyaXkTNxUYFueBBDzY1CBw02lFQJEkKcflZw7sHpF8Zj75a%2Bn7qjpaYcoqvv8KYnRyhy5ydEZW1wFGaEXq%2F0bj8VAR7sE7%2B%2B2wRCYxw4AfOgCyJU8txK7rqqSQHK8ipkHQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e5fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36492,"size_decoded":37510,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"fb404ac62d7e05b2ef16c92ab322b5a1","sha1":"4f4146846135072b9b6578264f275a166aaec41e","sha256":"c9aae951be38741ba3050c60f1babc153aaa26737ec92cb7e3ef93d29fe223de","sha512":"d8edce2aba6148211f1ab66c29d9892b749d9727877dba447506fcc20511865944848659fdf4b0b0f82c7b154a2a6ea5295832ffac8b622354db19611dca1471","ssdeep":"768:h7nB0R+os6pIYctmOP1W6r4i+9nA8sS2hh98eG8rbMn/Hn2Y5:gR+osYIFUEp/RDGy4P2Y","tlshash":"b0f2f1507c32c7c1cecd7435a7ab28731b1a8e199bc5a93a181ba3dd2ab4b4d9c50774","first_seen":"2026-07-08T11:55:56.089786Z","last_seen":"2026-07-14T13:54:41.616559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:55:21.419Z","timestamp":1783511721419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 500\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en310f960a76e1c91645ea9b1d5cdfa4a5\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkD6BJzkk1qSf8phLUzbxEVBDJCSZf0%2BBO6C2%2FAgXFn4XGleV7L20%2BG13U956rwZF57daf0%2F2ym3kP9CZqRqNiWoIZmbD8GH%2BUAdzdYk2NQj0OAkQevN3%2FICq36xAX%2FCMW5KcA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ee6437bcadfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":164546,"size_decoded":38181,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4550)","md5":"728913eff4bd8be23b27dd0af2538aa0","sha1":"546c62596f23979739c650b84819775614e12533","sha256":"bf6bf7d7ad17a8d1b68ade2f363e2f28d4f6e7807d507ae686e0cd887792b6eb","sha512":"0fa58f6c9ce03a96b4937cf2bba09df6242d0276384e5898e0e2a615b03ce2486bb700d31b2b2e3939c13652c2e97441f52610e9bbac0c322fc9c80563a85972","ssdeep":"1536:lDlSr2CRQtvFjTSZiJB5cdej/hGoamqsiBDuS:GpRaF/S2B5usi","tlshash":"4ef3e6fd22f048e7488346c76e612f0a3e95d617c95a0950b2ed8bd82fd2d5dec23989","first_seen":"2026-07-08T11:55:56.090697Z","last_seen":"2026-07-08T11:55:56.090697Z","times_seen":1,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":70,"connect":22,"send":0,"wait":509,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/mcnertney.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.282Z","timestamp":1783511722282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/mcnertney.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/mcnertney.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go205joov4au\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfVc90hhHFUVwZFywqb8cwLAJd2yXquKeTM6uXHoMm5uEYjrAlXTQT4lS5kYzOPN9guLuEX5ZsMwZNGuW0zH7epmizxjgePXH%2B%2BXHmj%2Bd71gKHl5E70UB3qfYdUxl%2B%2Fw%2B3Kpig%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c92dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5574,"size_decoded":6596,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"338b10263553bed434458b2610eb0293","sha1":"15c64e5023d71e5db741ab451ab10259d49c169f","sha256":"e938c9c3cd086f2d4be967361c9c08ac03dbb191eaddf45ca206bfd90686508f","sha512":"ed7d53c6ce381d9a60b749a6f2d416cadfec0cf89dd9470586a8da7aa67a33dbac47167508c5c05633608575ef6b01e8e5014ae7c23e0bcb0effdcc4ea91df5c","ssdeep":"96:4pPXppjsbTdkjHCd4AWP9ix3GLpF8h8W+j5S/DOcj/CuSPnXefxdXhasbr:qPZpmk7C13cAh8WCoDlOuYXYxdp","tlshash":"81b17e175b520096de3c17b019a98ef93bc7a5037b761f3a98444d187b1b8ec71c4ab0","first_seen":"2025-11-01T04:33:33.242572Z","last_seen":"2026-07-08T11:55:56.091859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/alien.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.288Z","timestamp":1783511722288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/alien.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/alien.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go1zal5994u0\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXYmd4wubsS7yaiGt%2FgxuH0ulcFLTb3amRQKa%2Fyr2ocqBPPUOhV1ICen2F%2BCYMhI2mPMljHO4aVmtUdC5qhZmUMWI84AllXmp72%2BCu5YTitkP5%2FYtiyKNHK4fS%2BGSHdkT7IVkA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c98dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6264,"size_decoded":7282,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"e2d57a4585e97a415547dd687e1c1953","sha1":"68f73628d67ff6a2712e1c31722432d2ce7f6bf6","sha256":"4ad73f39e8abf8d8ff99291238c28bddae531954b48f793488dcfb4eb646266f","sha512":"c6d3170abf1987a9a8b020c816258a51486b456da46948eb8b7d0517c200f87180dec7577284dd57f21168de71686e0d544f2c70a1680a222dc702f470a4dbaf","ssdeep":"96:LtjpmBPd6W1geCOW+059CqKPIQOVIDycAOxhuDyaqIPKNZYtv/AgMWsGTw0ySxn:LJ4/6W1CzT+vmI2Pm+zPKNMLSSxn","tlshash":"4ad18e85bf3a9923f75c1c3d85640fb1da60db15941402a6eed2ba00bb7e4ec68503da","first_seen":"2025-12-20T02:09:47.771096Z","last_seen":"2026-07-08T11:55:56.093104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-6.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.301Z","timestamp":1783511722301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj115o-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiqAc9AcVQzEhMCN%2Fw%2FioTTn0vbF473jPQwkpV7rf1gHWB%2Bscd1lCvgbVJKu84i6CHuozQag1owAu8Ki5fsEFykh5rTuKwUC0%2BMeVVliHvRmMJNNtfsO2kfpt5hkhormQU7F3g%3D%3D\"}]}\r\ncf-ray: a17ee6486ca7dfec-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1704,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-17T09:16:40.351231Z","times_seen":60,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/5.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.315Z","timestamp":1783511722315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w164-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGHLU47bWLysTWR2cqwCzzDNXYg1CqsouEjjyutI5jTggVc9D1kj0KSU%2Bap1xm8YfRJgL013pfMaFciU9gnSF4B3H9lYUKxTnimGH3e2SZ0AV27Evvn6fFYlcWTzwMsAEaDK%2BA%3D%3D\"}]}\r\ncf-ray: a17ee6487cb8dfec-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1790,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-17T09:16:40.349953Z","times_seen":56,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/images/text-block-3-bg.e02f2b7e.png","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.117Z","timestamp":1783511723117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/images/text-block-3-bg.e02f2b7e.png HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/images/text-block-3-bg.e02f2b7e.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gqk509uf7awz\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QGVTCum8%2Fb%2BQoHZuu9E5U6zC%2FhXVSTSu30X3zEpqtlun0BCVk1Y98z0s%2FGB1FLEGfbeyeUafc2214EYuzFe%2B3F2u%2FOsQ5xdK9O1V3gnJOUBAhnxUhXg6a%2BHgaYgKkphrChldg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d7d88dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14147,"size_decoded":11472,"mime_type":"image/png","magic":"PNG image data, 1440 x 492, 8-bit/color RGBA, non-interlaced","md5":"6f62c24117634af99f35f88d11894678","sha1":"7be13bbe2def230f608d04c09780005f615668d9","sha256":"317ec0aa5769282689cb6903eb44f35fc1444d96a0badf4f9ecfdd60bbd85747","sha512":"9ed9ce17423524f7b248cb2e82aa80aa163940244ee293d3ecbbd38be262ab21f2fe522bbcb58b3acce7c18858363e0a52b4e17253636f71cec8b0c7f967ccb9","ssdeep":"384:xJ9ZPllqnlGsJvKPn5k7ETlp7TjL6ey4uMaDdE8/2DoG242IchkTU6AibQ3o5TX4:Tl6XQDHA/JP2L4/YAcr4","tlshash":"6f524b249b0c4ab3cd7f4ff83667a7306b350b98d42441475235dba2ddd3b98a4a27ac","first_seen":"2026-05-18T23:51:30.759583Z","last_seen":"2026-07-17T09:16:40.180803Z","times_seen":5,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/app.css","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.234Z","timestamp":1783511722234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3gqk509uf71abu-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgOFNn3iu1Xtp9DVBj7GrVgZMqKfYxxRXNw%2Bb%2FwMO4vXKlPhhWeiXswmyqvIwOKJUtc%2Fy0owa71OG9EznXR57pfxW%2BzHNBoroFK6f9bu1zR4h6nYYhLbZKTIjksR7r1EujCflQ%3D%3D\"}]}\r\ncf-ray: a17ee647fc5edfec-OSL\r\ncontent-length: 10727\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60042,"size_decoded":11770,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"e33584ee6c7fcd67994fe5da3b1e8457","sha1":"f82e272ff2b699e29c5a88923530840a7c264e16","sha256":"6e6fd149ec6f68fab40533d2f2f5835a907da06a309219e17890c89cff571db0","sha512":"512066e67969bbdeb9f0fafdc6a21cdbfa15e4c2a4fa1600194e595973e9a12759698470178c7630459ab72d4270482786e5330dbfeb7f5e161ed2b3abaa3e91","ssdeep":"768:LGxfjQujcpAY376hmH6AsbCBLsscvUvFzoJIl:LGxM0cpl6hmVsbSsseIl","tlshash":"fc436323264a603cb43fc565a8d0a69d312dd407eb6f57fdee52a174c9ca2d31732b88","first_seen":"2026-07-08T11:55:56.096679Z","last_seen":"2026-07-08T11:55:56.096679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:28.766Z","timestamp":1783511728766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:29 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZxl4AhI4f6NkL85mnqGOJdbQBJmRMllZBgr4XOkWoRuqVIdhToJZyaNuQmKzXW6CqyISlqjsz2nEJIsfEICmSdOpJr72IqbWf5MzMmfhXoX8qGX16Q3Wzm0DQ4otv03%2Bkf6AA%3D%3D\"}]}\r\ncf-ray: a17ee670c976dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1032,"mime_type":"application/json","magic":"JSON text data","md5":"f8ba96c4df822ea221c266e5411bf3eb","sha1":"ca203a838c5389c86938410058fd44cc46b86dbd","sha256":"41c96b0ba1959b15a9b10c8db2c9ad33d588c6166fc8ca62b6fcaf9899e0c7a1","sha512":"fdb721badf96e237bc7a315ec7e8f413f2bd3045900a3cc0ca03fc71abdd2ed3ee7c560836e94bee94e54db008b4a775ae23035562073eddd1b3c4599eda0480","ssdeep":"","tlshash":"f8a022eee80088ef0333a800ec0b32f8b8200f0302a0ef0023a88c800c2830a8003ff0","first_seen":"2026-07-08T11:55:56.097592Z","last_seen":"2026-07-08T11:55:56.097592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wild-wolf.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.322Z","timestamp":1783511730322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wild-wolf.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wild-wolf.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go2931r47psh\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlq9TG9Fo6UbAHfNcnIVxLYr9uv0a8oXUATRL7DA%2F5xSETf5DiPbbE36xflP%2Fk2UugSCmLwIgbp9exb1TF70s0YTfrLW67dPzV6YEp7%2BelDJOMkbyjhawbsuQK7HCeTzccM6tA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a8a51dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33425,"size_decoded":34439,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"25abd1948eda4119c2bbe57650e9e1f6","sha1":"8f58d9d31e192140d4ba867be3584d4cca09a263","sha256":"87a85809ae6ed5a239a88b93b8016f1fecf1ff6f861506fa5aaebba832f40abe","sha512":"978af6af41c9fff00427fb820e4d96c74d40395f8b62eadf250c9c086a7be0e1ea1fac798174e543ec1df750d1505786c88f4657efb45097073275c77779cad3","ssdeep":"768:0GT+rnDGMuaR5BOqi1OdAcyajw8ezvtPJsPFc:0oIDnuaRqEr0801Wc","tlshash":"a3e2f18e4906490dc7aa69a9e515ecb0882028d90f0dfdf9abc9747897571e03c6673f","first_seen":"2026-02-04T18:36:07.423673Z","last_seen":"2026-07-14T13:54:41.465913Z","times_seen":4,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/prosperity-ox.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.212Z","timestamp":1783511737212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/prosperity-ox.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/prosperity-ox.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go273lqktloo\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMZqXfdIvfDvdOTpVQO2rLZ6eMyjEGfWCw%2FxQ64a5DtpXkwP3NfDpHg%2B6Zsb75OMdrxCo7ODMSBSyrtZl1WfPLmXTAdNPzb039%2Fa2lsFzR8pHWJUnEg9HxNI50Nxwa9Cnho4ug%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e5cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28104,"size_decoded":29122,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"8dcd6480775d62911ed3c644b349b792","sha1":"638cbb8ec54a5e0629f696c29bd3eb88b0f27070","sha256":"47647dc30c2cbe73feb5f3dd8f43338a19b04293dffa6405a06a75f2dd976da4","sha512":"afcbad596a9cfb13b1bd9118edb8afce02379bf9b1e94bdf653f13e22be130b4260381bf81cbf03cfee66975eaadf273f56d913a261fad8cc267d65effd85346","ssdeep":"768:meAsyoZYwFZIrR9YJ6zeWNNiUGuE7VhsMvBs3zpSs:v1yoFZg/eWNpb+ZvK3zpSs","tlshash":"03c2e182709586c3b38e4ff7575c4964c949cb8895492f4eb880fb31bb1eca74e6035d","first_seen":"2026-03-03T13:50:30.762459Z","last_seen":"2026-07-08T11:55:56.099593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/nicer-dice-100.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.319Z","timestamp":1783511730319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/nicer-dice-100.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/nicer-dice-100.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go26pbc2iidh\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5csbQgjNYXo8Bu7RGqe117nWYrLK6geNibDLcA7HSY9HiPpURP6wxsDy2ZBsfOgFnbi%2FBNCu2LorI0GXh1otpJVjwSuP9GChhbPvE5zTflR6%2B92Woo23ylCjQgOo10fqQXNUA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a8a4edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23813,"size_decoded":24830,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"7302e2e8b05debd3bbc30e5271438684","sha1":"abd1eb8f3586c7774931ac60d509b88cd4429c68","sha256":"d88f02739db5ccf5b056fcc8fad46538fa9b5e0bd26c8c594cb38a889fc99c14","sha512":"9c921357963d1653ceb827c0ecedb87249ba46618762325d1c331f11f2a9def1f7650072a5798e5abbdab1440540acf211df964a3d698b17a300333784bb79f2","ssdeep":"384:siwGCJ3cHRFSVJCTBZnXvUdvs++M7yCgeXQAYB2+qxSSg0SGWDgDgfqQKU0xoXA:nwzJIO3OZnXssBoy0QJBRqkSaGWcEKUO","tlshash":"fab2d00f5f35b024d87f3167b22ba8b3a429eac07f69f15b41e5d1628b1393572d68b0","first_seen":"2026-07-08T10:52:34.938551Z","last_seen":"2026-07-16T11:27:37.696442Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/red-dragon.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.262Z","timestamp":1783511722262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/red-dragon.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/red-dragon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go27aqxtyocc\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiT0SXSjj7pVPGHjqMbDCH1LSkNOZaieQr62A7TVZmGBNfdJJsHewC3pfkROUi%2FxW6jpzBA2j5uUBNbRlfkDoVtFSNTod2RPiY4sndXfvz5SHsmD1098sN%2BlUQLdJ397yKxnzA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c6ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31548,"size_decoded":32561,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ded400f239a5321a50900d5fd17ee5f1","sha1":"45c9e095e1b77330fbdaa01896d4477ee2655a1f","sha256":"3870e546f8a2ebda2b13e000ec5ce8d863d29b867a64bf6839d891096525e33b","sha512":"f04f5bf1060ff491a250c1a1c460350272d9c771595c42f77d28c8b4263205dfa4e1a0537886081917d776175c4f8cf7b136fc238a52f1187146fe92f478818f","ssdeep":"768:KzJWF3Fq8kaADyjc8OgQnJgPWlohF3XHCCwOEGR1X1SeY:eKq+gyjcNJmlHfjPSeY","tlshash":"b5e2f1b9d9d3e841bca5ce264a57b1f3ea02056ba097127569c7ca30ca462432fb1c74","first_seen":"2025-10-14T14:51:48.931143Z","last_seen":"2026-07-08T11:55:56.100639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/eagle.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.281Z","timestamp":1783511722281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/eagle.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/eagle.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go1zovjrk4y7\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FQHl0M0uo%2BabKhK4Xkim5GeQpL4zPRx4dKqXx4MlcDODCLojxF2E4Kv2XiVVC5%2B5hXJV6pfFflFO57cjLZYEHkkm8WkTAz1bdZ%2FRwX%2BnbzqpsOoqdjduPRGTukuxqcazdetbg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c91dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6415,"size_decoded":7431,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a4c6b9323b98365319979341c3fa5418","sha1":"dce6c9d59be578fae02b465ed097eb9c05c974bd","sha256":"275103130c4f95bfca4ae2232979dacfbf49b3113c7c94c308f569275e9fa6e9","sha512":"e973abf6d37898c55f822934e4ddbbed063ec6a5fb633a6be2cdb31b1d0010d6554b0e99c93d6fdc2f254f3f2d9ee2a35171a9b35d4a840cd835084bf49c1a2c","ssdeep":"192:+Kj6qA+pe7TyZWBDasl/JOhLdXjYpz8bJwXeQk:+Kj6L57W42LvbJj","tlshash":"6bd19ebe3d716199ec6e63f5cc110316c28c9758b3d60a840e44af2c672d7c1a639adb","first_seen":"2025-10-31T17:41:30.741837Z","last_seen":"2026-07-08T11:55:56.101732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.256Z","timestamp":1783511722256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BIE8Dw3Nu4ZXa4CvuYcF4v7Be028WbjS9Uv9JLNANuN7DVeHjwh8LVbBkZsq%2FtukdNwqNY%2BsWSeb36w8pmgrD5Wc%2BjMN17dRrLTwKhQILaquanD9MGr%2Be%2BBqO8%2BTCSSp8AflQ%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3vrfnuu9y\"\r\ncf-ray: a17ee6481c66dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358,"size_decoded":1195,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-17T09:16:40.28456Z","times_seen":46,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/nrg-sound.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.267Z","timestamp":1783511722267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/nrg-sound.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/nrg-sound.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go26rp2hkqk5\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3MgwLvtunzHrb4CMSKTMMK%2BBrbuh6xZ%2Fv6oLZketFbNjH8kjKmCUS25Mnue8ksA5Ty6qXt7qs1huuy7OWfNajd3ntmM3%2F8yfEyHvsk5eT4o2wu%2FcTiNEFn85J9SuI3cDjtbHw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c75dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34421,"size_decoded":35437,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"38d3f2ef1daa34d6e4165b51d7416cef","sha1":"6daad54f392c2fb0680f10d127489af4c2004f64","sha256":"6449d26b8ddead230ac5d39206776ad192e690ffef3206423e2df22db434bbd2","sha512":"935fd21c8c3d29345338eafc7bfdc3b2555ba056073f9b971e30fcc02f439b3eac005f56de08148975f080ab828a468d7a3f8082c76c98b66e72dd069deabc9c","ssdeep":"768:hqrObAMttlbRhIJMGlAkKKTC66Vac2U3lj8ych8XbEaPj:hkObpCWGlAqC6NU3XTb","tlshash":"78f2f1198af32211594e78778de2bb1b63a26d83c35efcd8b8d46316c72c6392e85141","first_seen":"2026-07-08T11:55:56.103716Z","last_seen":"2026-07-08T11:55:56.103716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/coyote-moon.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.270Z","timestamp":1783511722270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/coyote-moon.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/coyote-moon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go22o1kkolv1\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulv7xT5%2BUMN0kdgchZ3IjwyMiCa6Pa8eDE%2BzbdWnM%2BnsrwXi%2BDJ3fE75f9WWigLpMCth9G9yjzMszROgoBMuaHNGz8pAgBZVeuPJEEMjoAmVOWeI1Fz82h2OymD5562kx7vVvQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c7adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28333,"size_decoded":29351,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e0066969a7aa34cb307e62322d39156f","sha1":"bdbc65973dd0d2e9febb7788ddb9b6ee2122ed11","sha256":"045d4644bb757a20460b2e95c73362f26ca54fd023f1b073e1cf45a3c4be4fa5","sha512":"878b218be1e8567077af2c991da78797569805aefb91056a0df7ac8621f790867d3c2b7a0496b1c9054437759052346a7ba697d22da9af4e1fe9e20fcbb158aa","ssdeep":"384:O8p7Poazw+fsI9p7cX/e9PkxVWqNIQr2f+xpUEuL6WyLOh3SYYQ1V3Z3lS9oMDjb:bw+0kwmENIQC+jUeB3QP33SeMw6+G","tlshash":"bed2e1a1cbb3c8d258ce4427d9a22da882f8a67eb6ed11513d41769453786fc8ecd132","first_seen":"2026-07-08T11:55:56.104616Z","last_seen":"2026-07-08T11:55:56.104616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:28.762Z","timestamp":1783511728762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1X2qayfLijxVj69zXbOMLF3y4Hf40vV4ceCko6ieTtAxiwb0swHYwu6eicSCGKQFmRZe6UK3HbFyKdcSJCydT6842XuyMfkhXDKkoTlAEPm8h6pfhV5wlbBWmTTull2tmwstpQ%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3gqk509uf75z\"\r\ncf-ray: a17ee670c974dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-17T09:16:40.274673Z","times_seen":108,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/secret-potion.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.204Z","timestamp":1783511737204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/secret-potion.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/secret-potion.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go27p1cc8mes\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLgxjO%2FtS3ON824CdmVIMrClvhWhq%2B4bPiQhuA4viTu4dNdxS%2BjMhwrHnm76kOizXW90cwSbdxwTT%2Fj1y5%2Bv1kPLiZK1WGlw0cc9IgjlhUzmnC3Z4F0wE0jHmsUG9PTWf%2FEbrg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a58e57dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29044,"size_decoded":30068,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f9111a51f89fe729c24116e0e65bae1e","sha1":"82546b8de43b7b90f0c2f0a0e7a62dd9eafd6ff7","sha256":"1b08217895bcbbcd4d0520b836f7873e217a63867ce782f44fc78d353caa0c8d","sha512":"36ac1f436f9e38b2d3f5cd6a588aef4b6bdcfe9d439fae22400577683e54930bfc2d49fdee83941deb9083685555ecb2bdad702562c7a9120632770b00426bfa","ssdeep":"768:trpsbepedVnm0pRkY5XEDX4h3sm3gHz3iQaqq50u3U1EN:hpGaQVntkXGQLNaqbuk1EN","tlshash":"71d2e1e367f85db9760ce11e2beae13d670609c0b06836d7278611137a364e3a3676d8","first_seen":"2026-07-08T11:55:56.106386Z","last_seen":"2026-07-08T11:55:56.106386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/champions.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.195Z","timestamp":1783511744195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/champions.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/champions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go22eimwhsrw\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hz0UFSElpMIuk%2BUuDtJ75HGF%2BGwRjdrFCRJEKmCkMbAi2lXCJ7xLt0DXQKGGzulkkydsiiTPnZYNmswsA2tA3mGtrhjq97lurv4yn40LIKAk8zeIR%2BrIGN54in54vlBcD%2FAafw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d13b96dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/golden-egypt.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.264Z","timestamp":1783511722264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/golden-egypt.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/golden-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go24dynfwjak\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BPWkLvwbZl%2BtZbEjRV8iWyGEUHZHKeLPWOo1kCXbjcXY4LKOfDx3uEJLjxtQ3PLqafcuTEfT3UBpsV%2BhZy4I8VGdWO4yYgvvZ9Twc%2FgV8rUttbP%2BHVbG1MdEIAGObSUkh%2B3HQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c70dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25004,"size_decoded":26027,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1ace05fe1c1cd515863f2d00df2efc74","sha1":"a01801e1258927d224330ef607d0eede8a5e944d","sha256":"f8ac33ea737f03e7241d2195a490c60288f4c68ad4451fca852619925efed096","sha512":"5336a1dfd9ac23dd38fec3e8f8601cb8092a32c5e4916f906acbeda3daf84e3297836812a4e455cc6b9046cd75d805fcfe393413cd6f6024bea560975c0570de","ssdeep":"768:QdOXYcKj6rMX40je+Q/mcqfqazMFGG/YV:QdEJKj6rwVbQu/CGGAV","tlshash":"50b2e192beabde29f02e7432b9641133ed0259685ca95fd2c8576c5c73b81ca1061cb0","first_seen":"2026-07-08T11:55:56.108272Z","last_seen":"2026-07-08T11:55:56.108272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/deep-blue-sea.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.258Z","timestamp":1783511722258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/deep-blue-sea.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/deep-blue-sea.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go22st1ermxb\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHPWlmKk6p3Du6o8%2F2Pm6cGEHLztFElItRzwqyq2hNXRWu2EIkM3KN8eAGXdweBo%2Bt1LNztvvJtzL%2Fo%2Ftt4naJMiTZ%2F%2FgJJYD1qF3qOixUtUiC20dan6tmAEaor4L3sPEE2fNQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6481c69dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29711,"size_decoded":30735,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"719c3306744e9ad0c8557585ba96469e","sha1":"d9d93c7e5fe21c726285b1a4dee16278589ed08f","sha256":"0954a8436968147073675440fb63edafbca415eee25f36b3d3b1ae473478f18f","sha512":"0b4db8134aec5ff15e0c0ac352a8b23b4072d41c54d4de8a12a21aec246d04c44420739f56ad3f664422aa36539d0358f132da4f457cd7bacd858fef8111b2cd","ssdeep":"768:ZJu6tpHcv26VfoF9LNkWl6MzoOTXm5Rr9YX3F:ZJzp8vrRE9pu7gWL9YX3F","tlshash":"24d2f26037fd8003e9ae961b7e3b53e31caa5620bdb3a5d57468ece893044c105a93fc","first_seen":"2025-10-26T01:21:03.183037Z","last_seen":"2026-07-12T15:18:43.524653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/magic-hot-4.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.316Z","timestamp":1783511730316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/magic-hot-4.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/magic-hot-4.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go268n757jog\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LY0NSrsI8p2odcvbzSUDBgdr7qr1Jdt6ccdtT2iEPNnQl5oGukGJ0OWYFFP%2Fc1QwFVvRQKq1W%2FvYH7bIorYHFfVOiY2T1NqytKkn%2Bp0qB0N6jPdx3Oh%2BMLEgTT22jQoBLF5wVg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a7a4cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25504,"size_decoded":26522,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f9d91ddd8baa37b200b5fe3f986e150f","sha1":"3553733be73859bc8384575652a013c2518d9c9e","sha256":"1a28dce409377b0691ded2702a26683b714ce19c1c15bdbe57c9d159ff004891","sha512":"c91c4a33ba5e85393a5fe4a37401ef53d6587500342e21db42be9736f0bdf3133e07dfadc401fadc609ceda4dff3c33babc78f76fe59ff6a55dd30df9987eb60","ssdeep":"768:j8AZNgI3SCWCSKAscd/JI91zsQxl9YPy7xoom:jDe3CWClJcd/ElsQxlh7fm","tlshash":"6db2e0e55059348dd41e9b3621fc757d7286fa98381c5f0b3584708e2ffe049c4eaae5","first_seen":"2026-05-13T21:36:16.087605Z","last_seen":"2026-07-16T04:01:52.315716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winning/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:43.823Z","timestamp":1783511743823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"923\",\"1417\",\"1555\",\"736\",\"699\",\"576\",\"1745\",\"2278\",\"2378\",\"505\",\"2596\",\"712\"],\"locale\":\"hu-HU\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PK7VnTwAcwi1fdonpSnK3TnM2Wl7m3Y206OAXmWFKNxsPL7AO5wR%2BuoA6Y5jsOp68IJGXoWxYWlZYYCNTjs9I4WF6pd9djc08TLGlUeWqh97%2FrqugjUlIx%2FZir8EfVblP7RvRg%3D%3D\"}]}\r\ncf-ray: a17ee6ceeb52dfec-OSL\r\ncontent-length: 644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8677,"size_decoded":1631,"mime_type":"application/json","magic":"JSON text data","md5":"ae35c142495287e6137b913c4397c758","sha1":"610cb7ff4ddbd78b93f1b6c7e09d82170c4b2e03","sha256":"ddf9f6167c268ab6cb9fd2b6a35aa0ad95fea45aa6cba0c7deb3e70074e55150","sha512":"64e577c172d0d1d4e2d765b0d51db2b9e09db3584153d755ca28122ce047ee8352daf0a1ad85dfb0bf3be42d9e11394878831cb9cd85433e6a8c4a311be75a22","ssdeep":"96:Uf6fl9fJfxfvfQfhfUfBf0NftfTkfKf3fNfnfMwf0fQftfM+fYfCfE:D8S","tlshash":"84027096a962d73b76d360e0ccb7ffcd1024a961a42c8874bcff6aa2d3134146e8571d","first_seen":"2026-07-08T11:55:56.111258Z","last_seen":"2026-07-08T11:55:56.111258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-1.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.296Z","timestamp":1783511722296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w17d-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdyyDhG5KHnhwHoe2yhkFgdxaEgAWnJh1MBN7QWcPIAzew0%2F%2BFQRaYb%2FAtBzgbq6PMbKMPdgw5SW1EUEwF%2BvsQocljuVxa1mROGYK8ZkD3%2F5aksH5KLbHccw%2BYXloaZZrFod2Q%3D%3D\"}]}\r\ncf-ray: a17ee6485ca1dfec-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1654,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-17T09:16:40.258216Z","times_seen":60,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-12.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.307Z","timestamp":1783511722307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w2xs-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tof6rwbkL4E8wSeLfPxK%2F3ulJz5iDpbzF60GTLr%2BIYY82u1BfSQe4L%2FGyOtjs7d07%2BM8Xom8FOalX4exZNV6ycxAb6cpTpvpyaI46f7XJOjLw7QDuNmPHUsjEwDEZL18NmcNKQ%3D%3D\"}]}\r\ncf-ray: a17ee6486cafdfec-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3808,"size_decoded":2737,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-17T09:16:40.161673Z","times_seen":60,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/2.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.312Z","timestamp":1783511722312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu17d-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFualwjv1ArLZ%2Fiz%2F1fL1G7BnUei%2FUY%2FstMOfuyEzaZMvsMk2h%2FamT89dZbNfzplFFCbj6fFh0kEh6zit31pYNOxcEYimmnyXPEd6HgY4JvONHJH%2FiziIPAFso6PXUarcK%2Bq6Q%3D%3D\"}]}\r\ncf-ray: a17ee6487cb5dfec-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-17T09:16:40.368129Z","times_seen":71,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/favicon.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.852Z","timestamp":1783511723852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:24 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FHblNd8RtRhZFI13h3kNHj7swpwCb6GoqEnY8CzWwcekgha1685YqboHg1qQeizTgTyQyClKqR5AgbI%2Bn0T5oYYss9purja3Km4NhluuRfwtG0gDBB%2FWjFm5rXd9EivH6jL3g%3D%3D\"}]}\r\ncf-ray: a17ee6521e1cdfec-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1607,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-17T09:16:40.370789Z","times_seen":11,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/thunderstruck-2.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.314Z","timestamp":1783511730314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/thunderstruck-2.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/thunderstruck-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go28hm5csn7h\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxB1%2B15a4nhXywdTA9bRm0v%2B9oeMmPCeYGt0CD%2FgPbdgqnl4NEiGXs5ZUB%2F%2BqPKdtYDlF8bdck%2BmDNAbhyCkMt6EedinXlle3PL1kPXQdfkIPlejWrG%2F5RIyOErEAhAhDl%2BDJw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a7a4bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30077,"size_decoded":31107,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"68202e9d404ae10543899db860a90463","sha1":"bb1528ab8e73f3c104cdf084bcb033213081761f","sha256":"a4a36d2e80ddecf81c6276667a99f0b1d686292bc7878a015956769ead9e8aab","sha512":"b83ca3419a8cbeade5593c5ccf0b52de840a96301629b40e862740b2ab27990182c55b7bf55a04258a19f6bde9480284289774df0e7425ed74bc4f3850e18936","ssdeep":"768:YU/UV3Z0TXoMM6TsZWBpN6iT5Exe1Od2o/Zb9eI2:YU5XLM6YCp8iFnM2Gh9ex","tlshash":"f4d2f1aee7e8d0cee19ca7417eb0c8e2928ce96c8d021391dc02fd6d636944658ff5d1","first_seen":"2026-07-08T10:52:34.983327Z","last_seen":"2026-07-08T11:55:56.114992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/banner-jackpot-69b6d07f4aee24.67305796.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.127Z","timestamp":1783511723127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b6d07f4aee24.67305796.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/banner-jackpot-69b6d07f4aee24.67305796.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gzz04nbwg3fzd\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SM0%2BuGFPH83MnZEiZu%2BnkRuPxShLPaVgPdl4X6SV1L1W%2BYXWWArqUdIK1IiPZfoXE%2FYOD3AcSBxAIwJxMNrI%2FiN7UWQ1Rvl3uaaVWbbr0%2B4ol1DRDSrPqObYkin3Vb4LccAXuw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d8d8bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160681,"size_decoded":161753,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"e05e34d72bda47b8e8b39c51fee47796","sha1":"add7e568cfdff33ebf543dbb08b7c224b0c7e87b","sha256":"33e69b0033fcf80d0c8a0d797b9ebbe50e710907a7d8594a447f1eb5ec967376","sha512":"f1e6aa6605fd0fc99b64110bce9bc0714dbb23ea913869fb07f3c32b8a38166f0cd812c5d3d54be0656f0b4472df03cc738731e3968765f5342b8031286d968c","ssdeep":"3072:S13j3l+TsWW7W52cMnrrVDjPVNoTr8sqQd9fa2uuTUY2imw7WEOEOSIS:SFj30sWH2fP5voTwsm2uuTUxw7WE1OSl","tlshash":"e8f31329f70448c21c963f1cf5376a42c2a6ccf46c09aad15b3029e4f76d24f69abd1e","first_seen":"2026-07-08T11:55:56.115494Z","last_seen":"2026-07-08T11:55:56.115494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winning/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:36.823Z","timestamp":1783511736823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 108\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":108,"data":"{\"exclude\":[\"2215\",\"588\",\"929\",\"1057\",\"188\",\"2325\",\"1633\",\"680\",\"1772\",\"1546\",\"977\",\"715\"],\"locale\":\"hu-HU\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUqZFpRZR1d8gjofUARt608oEGFUbDf%2B6%2F4pTGuPHrjlfgLrskrNf6ynjdLJqC2G23cK9tGaWB0N762Jf4n96EnwbDoPRos4oaUThhJLtSBOIOrObg1h84sN7MQvpztLqNa1Sg%3D%3D\"}]}\r\ncf-ray: a17ee6a32e20dfec-OSL\r\ncontent-length: 603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8636,"size_decoded":1588,"mime_type":"application/json","magic":"JSON text data","md5":"8b9f73206b0c9c90472e1bfcdb0bf18e","sha1":"5538e39cc21c667bcc59b5def527126d2050c352","sha256":"1b74002ae23248456500ad5fc777dbb058b438304987906467e117b5ec3a43df","sha512":"9e0bb9212b7d6454005541c2850d4e8d443a32454716a0e0225423efec771fa07b89aed1efa5b494f7feec7175cdc3b7bc7358acbe754fd5c8ee1488aa6f3ca2","ssdeep":"96:FfG+fSafdfhfOf/fYfjfLfVfmfxf1fbfTf0fRftfZfMfnfpfMyf3:W","tlshash":"2c028296ad62d73bb6d360e0cc77ffcd1024a961a42c8464bcff5aa2d3234146e8571d","first_seen":"2026-07-08T11:55:56.11638Z","last_seen":"2026-07-08T11:55:56.11638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/book-of-aztec-select.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.220Z","timestamp":1783511737220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/book-of-aztec-select.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/book-of-aztec-select.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go21xuhz5rew\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VuNuk%2FZFB%2BLzOcI5KH48MGkTPJecDpf3ZyOOJ2guTrRms4SMBye%2Bi2EYzfeoZOX7Opau1KU%2BjRoEqErLveDBWg3PHlMxT3zMDAZNDZdA5Hu5xAJO5eSjQi8BcRqdHCKQsxSsA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a5ae62dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35528,"size_decoded":36555,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b408f550ed4ff5c9d710a331578683d6","sha1":"021b53c705d2d55bf48c0d9b4fed48836ad30ad7","sha256":"984cf38b6fcbec0915d00e187c1d0865afb7f7b1ee80b135415869340be5c06e","sha512":"7f55706c88da53f464232e2bc6fa453d65a40a91d07ada3323fc19f94cfd24ec10b892b801d9c856e1259f38d3e615f919ddb8c7703674a17438735cc8c72132","ssdeep":"768:oKNR5jxxv5IgWEkc/aylPolZx3rzWZ0rGef1aPq9hJWDCs8:9P5jxfIgTkcflPo1+Z2NF9h8DZ8","tlshash":"baf2f1455c1b7e005aac3e7e19bfb2ed1798be28ebf8244701c19134fed5dae18a0751","first_seen":"2025-10-14T14:51:48.912654Z","last_seen":"2026-07-08T11:55:56.117276Z","times_seen":5,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/cowboys-gold.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.276Z","timestamp":1783511722276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/cowboys-gold.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/cowboys-gold.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go22lnu5msha\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70G32vUas%2BaV4jf0OSFe5tp98cDH%2BSctCprDSYhLtfR%2BlFGmsmK%2FKGsm9CbPCatw2XlvGVKtna1508Auk5Ze2WTpMcln0XJc%2BUXcO%2BGjtUrm1UFTVd143LVMShbl1SnjZjve2Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c82dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36910,"size_decoded":37933,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d03ed89293c0a3d4919a00feab2f7943","sha1":"92a09c952bd03641f83a6cceab40a78fed45142b","sha256":"4b4f3a8a7d9008a817d4b2d27234b7e19daf3c552d9da4fe864745d06491575a","sha512":"def20e851e633ecc57f0dec0cd1d76f6f5c190544f7d8447da01fc3e3d59dd89a28e4246188f82df74dd44af327a2b3ff9ef96e1556c025c16c1b4c9557635a1","ssdeep":"768:MUdICKLs807UHnRWPSuYKclDbasxoNr9xJDt06R2ZEK:MUhplYHK75c9bYhDuZEK","tlshash":"42f20247e7668618eeee8c37d82ad1f10678a211ef0d23df705825f9473063a91386e9","first_seen":"2026-02-10T18:41:07.218426Z","last_seen":"2026-07-08T11:55:56.118365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/play_icon.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.293Z","timestamp":1783511722293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w3cby3jl-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOwvJzjvsuYJbvjKzhOwycpAgAQ3XQ%2BOgOx1apiBhjdP%2FzgOhlwNqABbul9CDjBFfZb6TI2buBHyo5J5ofxWO5xFo1%2BKzsJot6C1T2mGvoqNodowiCLy09ARo%2BM7haMX9JyE3w%3D%3D\"}]}\r\ncf-ray: a17ee6485c9ddfec-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":1364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-17T09:16:40.320617Z","times_seen":36,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/info.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.294Z","timestamp":1783511722294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/info.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/info.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj1ew-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rF6oUZkCR%2BkzkqWP63BwBGqRG4aqxW3Fh9M16LlKJCphKub2ZecjS%2F%2BA%2Flx6MJzbN%2BL1hDQbVxoXhbrHHWS1LwcgQ6VYGSUwXZTpTA5nhq8x%2FlRXBzjO94NKTzvCueGqgrui1g%3D%3D\"}]}\r\ncf-ray: a17ee6485c9fdfec-OSL\r\ncontent-length: 213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536,"size_decoded":1233,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"473bd880656ec8f01b551c217bb7b8f6","sha1":"bfe195c11e6528e792dde0a4804e49f8dbdb6b32","sha256":"9754ff056254c5bdc4fd4aab02ce7ec99b1a013f350f684ac3d17ec507d07da9","sha512":"0e05045644018bf91141807548d3722c131c2f6f5e15ad4e52ffff6b05438f65dcece5a29b88820debc8115847d883e4a37842be2ec0d293205fe3d1dfb41979","ssdeep":"","tlshash":"e7f059da238a0e3cf633c324db083234853d1343198c65488ab21932120480e3e3fee8","first_seen":"2025-11-17T14:16:40.500157Z","last_seen":"2026-07-12T15:18:43.832551Z","times_seen":10,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.132Z","timestamp":1783511723132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gqk509uf7eb-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILpnkzVPQAF%2BlBZrI6FlfqMnBtdXsc0APCCGbqNG4UIltnL4vTSKJueXDfY%2Fjt6vQ9ors9N6BJU2JQAycN2Ij3%2F7M2n%2BMki0KRQlbzBib0rY5DmxhnWCuthSd9DlgDHGms8Xeg%3D%3D\"}]}\r\ncf-ray: a17ee64d9d91dfec-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1292,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-17T09:16:40.350602Z","times_seen":65,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/great-ocean-platipus.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.309Z","timestamp":1783511730309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/great-ocean-platipus.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/great-ocean-platipus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go24umsd8ohm\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pk4mA793h6BpS4FdbTu97brVuNO0mVh%2BapOF9dK%2FKeL3%2F7OLhdGX3Kg0eDd6JL4YKJ9uLAj9P%2FjjyJ3RF%2BiVjZjhAaUI3J9iG7ekhbtgz00mtSc%2BQNiDPchkFUgR%2BnuLNRHnTg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee67a7a48dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31738,"size_decoded":32771,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"6bb2cc1d46f41deaa58aa2dde6a5e573","sha1":"7c63d173f6f9446f59db53fae9faf52e4741334d","sha256":"afffbc8d58ab5208e23ce7393de51c90aaffecde1c5d03510d27c69aedba15b9","sha512":"e7f564eb9db4245c790b974739a93b85bba19fabdfc31de99e1332b728ffb5d3fee19061e9ff6c6621321a40a1e0a1bcacccdfbd99aea5a983d71e96a3f3d3da","ssdeep":"768:qB5o8Lt0ajEV5IxtnSUE03VBW3hzYBGEs+mRHUFduaX2A/:qY8LGaj2C3Vns7RHIoG","tlshash":"33e2f150f7509d5b9a2d07605a2900cc7f5845c67aca1d8bab8033a48ffa3eea375d73","first_seen":"2025-12-15T02:33:06.006904Z","last_seen":"2026-07-08T11:55:56.121665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/golden.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:39.112Z","timestamp":1783511739112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/golden.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/golden.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:39 GMT\r\netag: \"dh3go24gcduyogh\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLmt4gjVaQbqnvw4ZgafRzcZPjSdvULVoxL%2BUACjy6cNOwfAclYJJW8oK2fmDb0FptOawz7%2BifYoMy1PpM1f49ZTWRClnVpk9IHBFD0AUvIXHsFsxFJIoRGWB616JKfcQuOILg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6b17829dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31697,"size_decoded":32706,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"629e7941b9bfcdadb503c4ddbbd01c26","sha1":"c8ad23c7133010f5cb8800a911bbdb04c7ceea7f","sha256":"357a5808014c55b711b42f9d2b9d0be0daba2019471b932ef2e8465776582f16","sha512":"593f66e56fe108d3f94d8a20925594e1911c3e292839dd17cabda58c2a1e8fe38b61bd28dee424d30edcaf33275f36a21941ed79417de2233588a2a7f753a3bf","ssdeep":"384:XAtPsFu/11JfBwwKOZo3HRkJ18kt09xisJnkO3QiSacukiSh7qlejnE1uasBjrQz:vIXKPHaWznNQzacukiK+AnCjWto6wOq","tlshash":"87e2f1221c6ec975c98c98afea7c0f163029b4a636f0e64044d2267de6b737b4547cc4","first_seen":"2026-06-14T07:59:02.180161Z","last_seen":"2026-07-08T11:55:56.122484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.130Z","timestamp":1783511723130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gqk509uf7hf-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypmi90ZegAlVyXmrrt6JBjgFN7FAGO0O9GdYi82u1e9gHWivWKqRnGZ2iEw%2FAabJzNTNuW5abZU8g6NKNKMzHB2kWdLWZvw%2BQYyvdIID70zuKMiI5DKIg59IBXv0BPU5PrXmtQ%3D%3D\"}]}\r\ncf-ray: a17ee64d9d90dfec-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1337,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-17T09:16:40.35326Z","times_seen":87,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wild-safari.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:33.072Z","timestamp":1783511733072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wild-safari.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wild-safari.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:33 GMT\r\netag: \"dh3go290o0p6pcj\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFcNB3HRG49FAs04FjDkHCzwgPBf9Pl7mZA6wYe4cQRf7NDEw%2BCbdhRUFhykhMLt57XtrxAlFPQFHEPB7GgQO33lCPGvKFNWn0zc85TA9vAGyKq00s8KJ%2F0MMCVLSTOGK%2FksOA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee68bbbd4dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32851,"size_decoded":33867,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b65dc01f95f6192871fb23df2e0cc36b","sha1":"05975779f06e389e6915e6b63c7d1816ece6ffb4","sha256":"720e9f0c7c57b46cd54c0744a6bd368e07e4d43633310b0d106c2fbcf8838ef8","sha512":"f18251a0c61c3edf05a13c857adf15e84774aaf45fa10feaade884160aceaa3b46681f7476fee44bee7f125c5dfd4be474799164b90ba93ab6ba6ea15c8a659e","ssdeep":"768:NCZm9ZV/oLzSxvFNCW9pn+5u8g1zvyjIo2:6mvASxtYe8a2Io2","tlshash":"2ae2f1c26ca8f335c978397344f0ac9b2e145a1636243b83758513a9677267b264a39e","first_seen":"2026-07-08T11:55:56.152654Z","last_seen":"2026-07-17T09:16:39.695747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wild-bazaar.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.178Z","timestamp":1783511744178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wild-bazaar.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wild-bazaar.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go28yaaa4jqf\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDyalC06mY06WY27cvxlTyPL8089yjTzab5%2FJl8g6lWnaRuKRLtWKD0IoOOvtwT5DgnDkgp752pq1wqxl6rm77CP28ruwDU7ZiHfbxGwjbZn73X87TW0GO%2FJOOZ2oWOR%2Bxx6RQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d11b90dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25575,"size_decoded":26591,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e6ba932a2504f7bb01248c3eb22cb662","sha1":"97e0fc5ab27566b32f77ce6601c7bf267097464d","sha256":"c023ed5133e963b1277a8a13eaa372fd2b7577a77f1fa5176728b428cba6448a","sha512":"8d9ed437e5ea67298f5896783659d5ec0ac2b92ca14e65685147b09ff3bddea74625f1b921b8d4d12f6019d74a0a8cc24aaad4114be28538fd30c37f58c803cd","ssdeep":"768:R52PH259sG8nuB3O0LU+bCaN87SOFhQUC0o2iS:rr5GXuB3jLUkCp7SOFCUC0iS","tlshash":"e5b2d166729ed593c01e29ac15ad4739d39e788c380207590cd99d9ce73fa1af9ec133","first_seen":"2026-02-14T15:47:18.89235Z","last_seen":"2026-07-08T11:55:56.154403Z","times_seen":5,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/lil-lady.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.183Z","timestamp":1783511744183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/lil-lady.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/lil-lady.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go25z49h0mt0\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV0tMtqxTDyAzOPMGd0yOWtWDsa0igGJ3e%2B7IyundKaCqHflBGeLE%2B6BDjLOvSwRGhZjkJhPJ627iuUOzzhl98SuwhG9lz9v%2BcCFq360C1CkZOMa0jTh0IkHMwo%2BDAahjhug2g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d12b92dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29556,"size_decoded":30571,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"435e2a0a44ee45d7b407900b63966bb2","sha1":"49af2aab11d9baed48d261e4601794211934aa4d","sha256":"d10f8d9ecda09b2bf515f66d5a4af9cef2a1af3a040ee12595ae06db1693fa01","sha512":"4b90b489eaf8e48586aae0e53b5207950cd3c31ec8cc75062a7b9cf57e252ac52b255efc069570c53410a6739cbb2b37561fb136c523b0be48c1e0cb16e53033","ssdeep":"768:XGG1Id2bZbs4pDlJflK/HnFjglSjnLJqFYMqaQclMCCVRPFa:TId2JB7JfmHFjgl8LMFRLQclMC2RPFa","tlshash":"4ad2d0e54a806985d94e56f25f4f3f1ea235d44e912324f4a0520e7ed7bd04cf888ea5","first_seen":"2025-12-20T03:40:23.639351Z","last_seen":"2026-07-08T14:48:57.7148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/habanero-joker-poker-100-hand.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.311Z","timestamp":1783511730311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/habanero-joker-poker-100-hand.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/habanero-joker-poker-100-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go24x0is9azv\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwbeG%2BY4xEEbq237hrF9WyNn%2F0M46sV6YRxBwXQU9osoYkCCgVhKb156PD6rI1W5PXMTXK3iSqY%2Fg%2FRBTsaF59nNn8H9oeniq5uA1ECb0eOFSGTWjacMn0z%2BX3AO%2F%2BreWgBuPQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a7a49dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14251,"size_decoded":15293,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f72ecef0b06ef980d58d352ff9baa5b4","sha1":"55ea0ce50f34e7dd228d63bc5a9465c375706ee7","sha256":"aaf1d861e12255a01822565ba892a4b21fc0393dcec485a50737ecfc2711fd61","sha512":"29dd2c3a4a399617e4da4a9a4c5cd3ac8c1662d119142a258270dcba4145b419ce5bb7f4056cd09a358f18175e19435ce6b20a52b55af5ef168bcd9123d24e01","ssdeep":"384:KGDXTwie/y10qChcmfq0M4S9GHYMnObkEq7RlUJaulEu:Kujwiopxhcmfq6YMjRox","tlshash":"7a52be40d394a109fe1c403914ef316346fd3298799227dbed4d973a974a8a838de2b8","first_seen":"2025-12-04T21:09:10.660246Z","last_seen":"2026-07-16T11:19:42.071322Z","times_seen":6,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/roll-the-dice-evoplay-entertainment.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.325Z","timestamp":1783511730325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/roll-the-dice-evoplay-entertainment.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/roll-the-dice-evoplay-entertainment.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go27fieo19wl\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNQdnNPE5Eb8wsATGKaoGdEp8rFW%2Fpa2R2WUV3zYo%2BaR36Xp%2FGmBEjg1AICiFiS6%2BOKCqxv9HCkHYjTwQ8DaH9lwQq47q6Kl08XT7kzcrE8Jc%2Byuh%2FK8e6Shi3Xpt36xZg9RwQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a8a53dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12837,"size_decoded":13883,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d032f407be2bc157ec638a97c3be447b","sha1":"d48d2d1bb441f12633df69d3fe64439549bbf4ad","sha256":"ec0c9a90120c599461577062c3f2f977a906d19755ff43e93251f2284a011b53","sha512":"725657513fd4eb44c4b07cf1228275d1da666287ef896ccb400e8a92eb90afd674a2f5163fdfee9f11f8bef5ce3db8a897262f135e5f8ce4052ad8ff60d13b39","ssdeep":"384:n5oamuw235PUfsGp2S6tBKgOiehQ25KXZJqiYIEj49:n5w2hUkGpAb2ie225KXDqi3n9","tlshash":"d942d0ffd66885dff65c9b7d01a8248412accf71b0041b9ec2f67e661386044a14a6f1","first_seen":"2025-11-17T14:16:40.622135Z","last_seen":"2026-07-12T15:18:43.721267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/wracker.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.329Z","timestamp":1783511730329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/wracker.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/wracker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go20td0vc4vi\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWdg1kX4%2Bc3wQPKf49pWb%2BNwKIb8%2FJNhtsvK4UtFBomERqvCVIcry5oDuvb2ma%2FgFQ8u9RImvKDD4KkBS8YKVNR9brIs2dQCKd1P9ZN4CmE5%2B3CYQRh%2FnvqchS0h1kGFXdex8w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee67a9a55dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6318,"size_decoded":7338,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"80e834a0ea93e2856c5229b5f81b411c","sha1":"6da427ff93563d22769aa94a448c58e7a4940587","sha256":"7f3fe2094fec0a39e2101da92fa50cbc2bf98163ccf69b778cc9289759811a54","sha512":"bed5311a35a3bcc8d04c4ea59b52b828b34ad9df5d45e0107482419caaa326e6c1aaf22c6becbf749b172b5f0f8e0dd71df96eae8864196fcfc9717ea850fa30","ssdeep":"96:Cu0Fg1RlkYwr52bLqeRVd0pCtFeALTX4DhwINyt8JkWIVcx+Ul08wIZ9LwXvEkf:B0i1rkYi2bLbDTo6KytTW1308VnLEEy","tlshash":"b4d1ae2b27a91359e52f03bbe2a22200f74cd559bfc90f1c65a605c85f076c49dacbb8","first_seen":"2026-01-12T00:47:03.806866Z","last_seen":"2026-07-08T11:55:56.161149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/aztec-temple-treasures.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.202Z","timestamp":1783511737202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/aztec-temple-treasures.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/aztec-temple-treasures.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go21h6d1tner\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08DrL4Q1y9%2B5jX8tOXFFSLCD9HafnKrpfmFte2wjzjMvlrPfdS9Q6wGJkCn3zwRX2bXThfbZuFJKlIEkUU4Oh02x3Ok3yxPfpB9iyFkv83XRuxEjrUExGsU1YZT8BwyEe%2F03Cw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a58e56dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30339,"size_decoded":31364,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3c68940e9e3c478715560f3c9913c84b","sha1":"5c00faedb327159c3bd589b800ed758927a0ef83","sha256":"b007ce8b9170c8562bf27d58f1dc6df9b4d1dcda46ca05e32c0df55f6d0fe1ba","sha512":"597311481edd7d2848b8b8bfefbce99af0291fc9c19c27f62c9648bf0817fd3d18bd9c38042ff43b75a53e55c7aefef07b216cbddc277c147469aca4edb9a61b","ssdeep":"768:HraDHt861KWtuItXpczm+YP5dsSvALqAy9KIe+qe2O:sHi60WtHZcyjH9vALMK/W2O","tlshash":"0fd2f14987693d07b0a98f7c88a45fcca3e04b700abdaa7535e03d55df0d6876c16be0","first_seen":"2025-11-17T14:13:19.289496Z","last_seen":"2026-07-16T04:01:52.328904Z","times_seen":9,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wild-robo-factory.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:42.120Z","timestamp":1783511742120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wild-robo-factory.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wild-robo-factory.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:42 GMT\r\netag: \"dh3go290o0p6hrc\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFWZ3T5VX0ixXVUlxcGNbButDmgZ8JnKXUudgSBUEoCvR0iUo364q3E6B9y97H9cqBmZGRsoXsbabqAehejMymyI34y2cCHy412kzvEqy95lLe%2BVT8dTqqaCCdq3kWN0yasY7w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6c449e0dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23016,"size_decoded":24034,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b5dc5f50672b65b44045afd8d74517c3","sha1":"574ff25927bc569691ee35d5438c796e056de947","sha256":"8bf287700027e4aa79c2425b566078a70c63f580b614e7493159f7a62ad891d3","sha512":"499f136225eb8ca56b15381b68f738e52a35dbfe1c917c1940d883b87d99dc29c7fb0bb4617b8ef8ff7f7d63e09ee860ec24c71e6fa0d74eeb82eccea4feac3a","ssdeep":"384:rIPyPB8X0bSa0gpY8d0Aidktcg7kM2fIWMwEGzcp0cG6IpiD6ANpcvfq:rOabC0tFwbfIWMwtwEiDtNpcvfq","tlshash":"ada2d01d9060add26c7df9945ba63d3b6742ee17265c8ac3a9b8bad423210d0dcf481f","first_seen":"2025-12-20T16:56:00.896215Z","last_seen":"2026-07-08T11:55:56.162461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/app.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.251Z","timestamp":1783511722251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3gqk509uf7zqo-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8E%2BIOyGakrGm3ui5avJmKBZhmv%2FMp5tUxxSuwxQhm4CJLXVJK1wMK0PTVv9BbvAdljIUnlb4GVBxc3D%2FI2HudJaxhpwNqIw23d%2BSmU4Cnrue75gjMkvNXdMNHXZsL%2FOlv6J8%2FQ%3D%3D\"}]}\r\ncf-ray: a17ee6481c62dfec-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46320,"size_decoded":8795,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-17T09:16:40.316879Z","times_seen":15,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/fruitland.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:27.409Z","timestamp":1783511727409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/fruitland.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/fruitland.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:27 GMT\r\netag: \"dh3go2421zcn9el\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B7y%2Bvy6jIPXb0JCUntbbBQN5Bi30giEOcdUPEQp7wB3ND%2BbGqbPEFMeCt%2FroJMboLrm4tmiQkZ%2BtGh0rdGvp1u6ZTXWCIx7KS%2FWPK73praBfyExu0HGAxe4E60WPXuhizyTPQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee66858aadfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12189,"size_decoded":13207,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cbfeab91eb103bb61992221a9a0ded45","sha1":"8d1ebe47856995b362eb0ab1dd7cdee08e2b5176","sha256":"9383d8c11ea484cf332d8b12c387a7a4143a9dd5aa0c7253e002419dc780ec01","sha512":"3777818ae1e3a86e57a478043edca163d714d0a4f6d51058b53ae4a4dd9ede430b83409cfd4be917b51064cd849901f58b5cb5a72b33df54c151233332c13a66","ssdeep":"192:hHI8d90vScNYvJfT+/xJ+awJvF7Z7sYkf6HtIfO+qitwP8EJpcFGP2+yOKY:F0v5N+qJFYvF7NFkSNIfvU8E0Gu+yOKY","tlshash":"a942be31b635cd16e6ae0bf7943246825616fc42215ee099c4e3a813f776c911af323b","first_seen":"2026-06-13T21:57:34.785603Z","last_seen":"2026-07-08T11:55:56.171065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/paradise-suite.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.214Z","timestamp":1783511737214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/paradise-suite.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/paradise-suite.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go26wgjboksd\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiUgWNCEBMTCYGS9BeLDLcH%2FyN8NTB0jmO%2FcxSQcm%2BrfkWJAlsOhngyW%2FW1tmBGTeFf%2F9M3LCTI%2F86%2FeiYuNOQjEkhzpHKt2YbyCNI66m3te%2B4h%2BVkRkDT3puiSQsXox9LN0mA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e5ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26941,"size_decoded":27974,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"21d8ef2509f884f426fd8406d92555e4","sha1":"728ebd46bb2775edcb578cedfcb88fc166baeba8","sha256":"b48226b64486634a6224a72b3c04521d2499a9b6e816fe58ed1ebaf40900fead","sha512":"e8a3bac20b4ea721346081cf5018e18602127098c01402ab8c606e51032af58d987b0a81c4d5537e6e3e096373dad689c2e6fc307ba526fe9a961a8c01a911d9","ssdeep":"768:j1GeGueYlNGNJoHPywKsTIs1S19vw7wXl:j1GeGyNGN6KsTFAWwXl","tlshash":"a9c2e0f95fb9d824faed6735b2183f44d53c9c518cdd0132abad3b62b3081a750508e6","first_seen":"2026-01-01T08:17:55.627337Z","last_seen":"2026-07-08T11:55:56.172702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wacky-monsters.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.271Z","timestamp":1783511722271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wacky-monsters.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wacky-monsters.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go28titg1lli\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQbRfC6bzlMckb%2BlR0VfYj7dvDS5AQkgIGVISt9pDDFKKyee%2Fc4qeVty3h68MoOOLc2WDikFcxCQOjgQPAICd%2B8V00tWOi8UP08tWJ5SQSKD7zlXbzn0GncHSMctErP3hXWChA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c7cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27990,"size_decoded":29009,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ddea4dd4eb36510778a9f50883d3f30a","sha1":"47f62d64c1b06ccc53ec7f6422fbc981ec1a5886","sha256":"2c7a5c5160bb1cf47b1613e4189cd2c5e40a2b6d2a1a502c0f8d68d860637947","sha512":"46620cf1aa065d813ec474a33cabeee84ba61f26face5cfc48569e1847495e952649e0fd1f70097e5121232eb9bbf42a289bd823d9767c2f4e929e32e152cec7","ssdeep":"384:hx6Ik+6n3sqYTpdJgQvX+bzY0OvA29DKCHWgEwsdXRkUPdc4RqUWsnreYD+STGoz:SIk8qYlgQvX1vvAoiwMXaUPyXzsqYvsS","tlshash":"7bc2e170dec46d9ed25b2b33dc4552c1d97edc08b7fa1977ab6ebe006b289500981638","first_seen":"2025-11-09T11:22:30.373693Z","last_seen":"2026-07-08T11:55:56.17414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/ruys.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.287Z","timestamp":1783511722287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/ruys.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/ruys.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go20f2md26g9\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dZHA7U1P9AveeWsH%2Biuv10gE860RdxZTdr7u%2BcMyVjDwtmlJn42MQJy8U4KaRtVSBDMBqPGk%2FeAuPW1OxoYSvUesjt%2BIc51ZnZFq8LslBhXGBibsa%2BDK%2FiNUQNzYjmo%2BhHcsA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c97dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8361,"size_decoded":9380,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f8c67a47483748a5af64f2e9cfa9eb21","sha1":"f096b172beb8480cc8fc613db669e1c85070d965","sha256":"9aa63052babdcb6f77b1b97fba58bc8b2e2ff24e4869e7feaa0855adc9144191","sha512":"1908499e9e47a819bd9d15133b52a0979aeb676eed4f2b76e5b36ad12e954591f4f807f3e3e54a0dd6605dd2d6bec6bfb9b25e70e185743bd6517b2c0d92d30c","ssdeep":"192:bOJny1xPv4s7yPgEbq3WHBstzqDCjcAkhc04bsZ:bOVMYgoleqD1ZR4bq","tlshash":"8f02afad6b32c446f33e17399dc0c7b597209a55b72209e71d60f80cbb2c0f68a65570","first_seen":"2025-10-14T14:51:49.406073Z","last_seen":"2026-07-08T11:55:56.175557Z","times_seen":3,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/live.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.292Z","timestamp":1783511722292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir7qgOBd%2BZtos1fWR%2F2UyITZWONTIwzTf9Cai0njuuWLUtSfpvk1o81ZcZ8dEYGilioRRPmtqnaegSw53Yprgu0bmirerPSW0k3lZp%2F4isB69lqlVGH5paUxjzpH3IviT%2BZPWQ%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3w0ylj16j\"\r\ncf-ray: a17ee6485c9cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":1138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-17T09:16:40.294302Z","times_seen":28,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-4.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.299Z","timestamp":1783511722299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj119b-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1%2BlwVzIDcHD26yRIhuepCzNURhdIDktzCbZXkencIg7tYhDO%2FPiCMzYpBb2EZxufRUhxQihgKYpP23%2Fl7rzega4Iivd0%2BHJNrJMeJJXyvrxqJODzuvggpuWPX4wLEj%2BbbvH8w%3D%3D\"}]}\r\ncf-ray: a17ee6486ca5dfec-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1631,"size_decoded":1793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-17T09:16:40.314787Z","times_seen":60,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-10.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.305Z","timestamp":1783511722305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w29u-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBOtGhs15T0TspLEge7kfa63qdkHIEjHXa3Ct6iZIonfOaV7MEWz5ItISQxaj1lUQxMTtwJTNtch57qikC8XBYTpheyQexMq9nfFQlbQSycIIrrLQGOtgKGw5094IUHw6ZrJjg%3D%3D\"}]}\r\ncf-ray: a17ee6486cabdfec-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2368,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-17T09:16:40.285141Z","times_seen":60,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/baner-2-69b6d07f8fe739.22540131.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.115Z","timestamp":1783511723115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b6d07f8fe739.22540131.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/baner-2-69b6d07f8fe739.22540131.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gzz04nbwggf6k\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BEtHh6d%2F%2Fvh%2F0ONlGC5PT2v87Q%2BfoOJfgmuYCoVPjzzyDkY10WBdp%2BD6duhGALPufyZfLtCLYDq0ZwPkxq46gZGiEjRyOUFhByH5ByposkTRWoCZgFT%2FxRhJNBGPkurVUh4Bw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d7d87dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":766172,"size_decoded":766603,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"03ace1c7bd03e767390df7c6e43838c2","sha1":"e9c4c379ee834092329b9e0b3debd55a67d39788","sha256":"450806dc538c8039e6c7a5bb0f5368730e550ac064b9c1ee8c1ff951de3659a1","sha512":"8158a5474cd925e687748f6d47e8dbd2af8bf1349f14512b33f2afaf1a4d75a33d4c75c2c8e1515d2025f427524df7afa05b0fd3b9539695c2791172b07e54f2","ssdeep":"12288:6f3MC1EOWg6Rd/vKZHrFIt23ybyzdYsZtkRssno7ANHk5NX+MNldrWSORYMba:6f3M8EKkdyZHe23ULYt2ssn7cNvldCSF","tlshash":"4af423a37d6140ff05a85660a7d79eaa6f8c7277d12ce4669da03c4cfa2844721c3e3d","first_seen":"2026-07-08T11:55:56.178844Z","last_seen":"2026-07-08T11:55:56.178844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winning/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:29.828Z","timestamp":1783511729828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\"],\"locale\":\"hu-HU\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3uYh8aIiMT%2FnvSdJSm%2FQKGznAIAEicXF%2F2I5Ooi5tsTAAjDfixJgi%2BjsjavzzuDyfB6ei%2F2AzAEsoUyLdkXRYo%2BciP72oDdU35oVeWRu5CfYMXglKBVHk5KPHioTxxiADJbrg%3D%3D\"}]}\r\ncf-ray: a17ee6777a08dfec-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8731,"size_decoded":1675,"mime_type":"application/json","magic":"JSON text data","md5":"43a2f851476c9694bee929df537a4b7e","sha1":"0966872fe500d7e4ad2fac4ee8386c5d4c207630","sha256":"ef653825f7261bd0befbf682a7447f856bdb93452d0059d5873a6b4de6be5b89","sha512":"b20a84b7f18f43ed56a5b8e22f0938097c4fa7bf57e3446ea68083572d0a09f5203c88408410f32e6930301230534b7f206eb324ec294c6e8b894d20aa35dabf","ssdeep":"96:tfEfsAfw4fZ+fqeufk4f4f0fYPHqf5flufGfsfdftfvfCfaf7f7fNaMO9fwqfwfI:62VPHez","tlshash":"69028196a962d73b76d360e0ccb7ffcd1024a961a42c8874bcff5aa2d3234146e8571d","first_seen":"2026-07-08T11:55:56.179968Z","last_seen":"2026-07-08T11:55:56.179968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winner/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:29.836Z","timestamp":1783511729836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: hu-HU\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 83\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":83,"data":"{\"exclude\":[\"355\",\"857\",\"897\",\"109\",\"606\",\"937\",\"47\",\"714\",\"421\",\"910\",\"340\",\"63\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Fn5Fc1NWjZJkfES4eCjxjYGUpKxg9wNQrSQpaTjZsu5c9PZtVm8txTlX9%2FaRjR7qQBN%2B3iuMN2PFPXQ3M6G8h5lWec6cTmGjXm5iEEYbCJWWhHwS%2BIQb0LhiG7we6ieisXsBA%3D%3D\"}]}\r\ncf-ray: a17ee6777a09dfec-OSL\r\ncontent-length: 209\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":1198,"mime_type":"application/json","magic":"JSON text data","md5":"e0fd7408c917fb97d3c9acca52a73f76","sha1":"3eb26a47d012deb420ca493f4922ff353c286328","sha256":"ada81a65eb53eb147f5f5013ae67642ddcb8f866533e3c3c073add091edb300b","sha512":"5b4cf9a280444e93a1840c76b2d8b76aa21f5bae1c28c6276eb76184ee428fa2de5e158c26575d9dc7a6a154aa7c1c8c2b23ddb78598ebbb772d15aeae5b39f7","ssdeep":"","tlshash":"78f0a0522b92a33fa19310c1cc73afed1448e993542d8438bdbf1da2d32a5005f8860c","first_seen":"2026-07-08T11:55:56.180962Z","last_seen":"2026-07-08T11:55:56.180962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/jingle-spin.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.320Z","timestamp":1783511730320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/jingle-spin.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/jingle-spin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go25ktuyqskx\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOdcIIbc%2FvmO6CjWdA6F95YCf3VNId%2FkJhwaNztE4IpvPHgSKe8syE9JUUTJjDkwkTaBl7HqhHwmcGCwYqZJQkeVd6b5oSLfSnQZijtVK7CNN5I3NUVMrxrwMiD0OpFey6tHMA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a8a50dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37041,"size_decoded":38055,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"c17561c166809e5c8b57b3a89fa69485","sha1":"d2d8b1c3c53a3fb44041b9dfe3c07350658e22b4","sha256":"459953d523f758cfb4116024081fa6cd7753e8b7997595c77aebc15a032080ca","sha512":"b1583711626cccef8705ec31ded8343bbff7e630fdc55a072ac2b5d00cecead9ab17a42fc27d0ad4d9700a0fdba283d90bcea47e3681bf5a9c8f58ae505038f0","ssdeep":"768:Rv8Lp4ePFKwArODd5eHWNOzmA1uIGQS0nH+88jRiz03az:Rv8LRPUwArkd5oiA1JHBc0QKz","tlshash":"d3f2f19c392bc5937d2e103a7c4e6c26469b45022b722e32677f4f2e8345ed0577178e","first_seen":"2026-03-16T14:22:50.848103Z","last_seen":"2026-07-08T11:55:56.182114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/chili-heat.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.273Z","timestamp":1783511722273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/chili-heat.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/chili-heat.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go22gwdbjm4s\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHMuyA%2Fzx5leiNPeBTPEFVGQagFjqEvtpuJbKzRyrPyeHaIX628gfBqt4PoCfYNytDi7mUpyIzuw7FkgkOGxV5zSzYwMWaHTiZ3zPCaktFVOoHwTjW7wyLPgTO2%2FH8YUO93iBQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c7edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28684,"size_decoded":29697,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"42f12f8615cbb7d172b90903bbd86877","sha1":"581d222f60e303ad23332214ce3528a24b976ef2","sha256":"d15ffa292931a1c87f76121e74d70e4910a7bff3dc7e9a5f9c63306d96b57a77","sha512":"783c2fce5bd2bfdbf25107c67b6327626743ff1d32957dd09c24cc6706e05aa6241ab0aa6ca90d360eea46cabc34b8e36a3466857c1d0767da1498c1e1c2e8ee","ssdeep":"384:v9vVlSWTW26Z8e0VVtD2kmIABXrn+txsXb5qk4jgyxTGJCuXNAGERpBx8t2+4aOr:5V3C7qnLtgb+AXE3jgdLdPt23ae","tlshash":"03d2e18febca28fdd41e309091d153320351af18b5b237e966501f607b29b686b953fe","first_seen":"2026-02-01T01:43:14.062079Z","last_seen":"2026-07-08T11:55:56.183221Z","times_seen":5,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/close_icon.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.317Z","timestamp":1783511722317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu1ih-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkRqgAP7mrv8uxbWsb4kYcwwZui78Nnc1AO5We999FOIOsQd%2Blx0HeNvjbX1gsymlCfkE1O6DeUHL5rvkT1UNPXtNvqmFbP%2BLICrYFIhQcfaHFO3wLVynj2EjVYhuvXJcnEPqQ%3D%3D\"}]}\r\ncf-ray: a17ee6487cbbdfec-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-17T09:16:40.370157Z","times_seen":72,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/blackjack-classic-62.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.203Z","timestamp":1783511744203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-62.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/blackjack-classic-62.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go21t3152ezz\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGnLI41JkflOoihCKjNi7dPF7l6jRPlfenDAiR72VVG%2FgKPftnk0%2F7XMmOSzjOgjxUFxLEx4nHzHdKOq0%2FGf0kDRoW95NJu%2Fa8%2FJWSqJHPi9iEwMkoh6HiSkzIjm1nxDOmOWTQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d14b99dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20468,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-17T09:16:40.196608Z","times_seen":41,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/lovely-lady.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.274Z","timestamp":1783511722274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/lovely-lady.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/lovely-lady.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go261hzw28is\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bgw3TAMahN2iEjoYSaKGQ6phkv7d6TOAJHsdGY9C94LPJy%2F74oJOdd0OfAZKkrflNxH7dzPKyf5QOSq5QUJ%2FvEc4BENpnvWzs1YcY2JRTKuiZpt%2FjdM5xBO3LQ2RvWXmn8ducQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c7fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11044,"size_decoded":11912,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"304c6be22d9992435e70fef5829ee624","sha1":"e6a5b221dcaeb75cf45772328762d039d95a05c8","sha256":"702f10f23e7f1ae58763952ef90de3930e9160133a25638eef17f694d43f07a5","sha512":"520d67d5990500ded696606e5778f87e9cb0f8f07379d1a87d9ac07872be7b2f5e70257c1056f8cb0818ee1d76b54bbd1603ce4b7f1b9d917e85190b7b8aae5e","ssdeep":"192:HtFdcinuXAMN0rSylNMh07wrc4oTtKUa9ifZYFC+sGsBBQss2nBAwZVMyM:rdc7AQ/CMh077U3AfGQtBBQss2NZVLM","tlshash":"bf32bf9bca68b022fa1c1f70c2e5d17ab44425bdd152961b3301e6bc8fbf8a886b5c14","first_seen":"2026-06-14T01:02:41.542202Z","last_seen":"2026-07-08T11:55:56.186742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/icy-fruits-belatra-games.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.275Z","timestamp":1783511722275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/icy-fruits-belatra-games.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/icy-fruits-belatra-games.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go25baxaju53\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ck4uXl6qzBj3PTUeUS0fmwVoJYPdWBguvkF6WaKEYinZEDKVHF8aytHVpdanbNk%2FJrRE2RxS6oLapjuY1Lk8hvx6cl2OgzYUJGovOsENmPW9nSwd9BNtR37TCeJKnVSi%2B%2FUmsw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c81dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39063,"size_decoded":40092,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f629c9920a5fca2f85c38e1d603e4a4a","sha1":"8af1c8314630e497ca1d31493da059531c53b2cc","sha256":"aa6852a321ec1f09981ef5ca9dbbff4e0a5da5366c0d893eca9d44b14d00db87","sha512":"5bf54891ecf7b5c681f0e179de5b6303397b34c4890c3ce249700d658987ae0ddbf87626dd8d2a7aca01c5c775aa1449016b2e3f7788311f69f9b9ae82d3b620","ssdeep":"768:S5W7Tce7zq9I0nJ1h9UYrvDijG5Lc1IyOuvNMq1N6o2akIV4JmczOQlIM3:S5Wnf4I0rU+Oi/vuvNjGokJmczOQlIc","tlshash":"fc03e1893eb88be59f6e065d56acd0c72318ce6065050bf4b42e3435df34663fe5c6a1","first_seen":"2026-07-08T11:55:56.192094Z","last_seen":"2026-07-08T11:55:56.192094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/next-arrow.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.279Z","timestamp":1783511722279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKv05LmWBrPPctFWgn1Pn2a4kF0idW%2BYatLEobeVUwRZrPxUzw7R2ugZIIT1yuvHX6XkjrSGSvpuzK5bLnR0QNTgPDNRgby1VmFQTvl5CAKZzSYONj83UhdGwDNCNH3TijmGqA%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3w3cby36t\"\r\ncf-ray: a17ee6483c85dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":1159,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-17T09:16:40.226476Z","times_seen":81,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-13.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.308Z","timestamp":1783511722308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9wf1-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bA7v7qfhiBu8KuGEixw8SYJ3fzSmOzcZQ6y6qny06zoHx7sA3gwjb6yqZAa3PIsZ4Mv0UywFaWWL6GxqlBSuEHVmKOxhmvu7BzqJXyNVWrzmASNLh33AKcRTYsceOvwy9bgZTA%3D%3D\"}]}\r\ncf-ray: a17ee6486cb0dfec-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":1337,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-17T09:16:40.368788Z","times_seen":60,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/18.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.320Z","timestamp":1783511722320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vp1xft2u3-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMkzGWkdwL761L1SLZmoqdlOTRod4P7VePiAO7ivmT3EGeZCzjU1X%2B4RYAw4XC3YuX2bYLLUl7i2Z2g1UywIaapyMIgpSNOBq%2B6dZz%2F9RAc2wi%2FBenQ5AS7j2cTnqznMNTRrMQ%3D%3D\"}]}\r\ncf-ray: a17ee6488cc3dfec-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3675,"size_decoded":2241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-17T09:16:40.220962Z","times_seen":68,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/mr-delicious.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.195Z","timestamp":1783511737195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/mr-delicious.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/mr-delicious.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go207xf3x53r\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B00qmzVEqQbFPFUlSnVVqePjTNfs2RaAoI1qGPrGrOrmiH6gDR4bGWsL%2ByZTYCcmByP4nNRLfQKE96IMySpZek6CKUIdv%2Fq94VFdgIksklA60Sy2dZg74VoFcyXD2w60We1kgA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee6a57e4fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6615,"size_decoded":7634,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"d1a450c6ba3daeba0552ab5ce82b28d5","sha1":"52d3fadc41889349bdb86e79010419dac101cc99","sha256":"62a99103c2e1fbc20c64b89e5abbaa9cdc50d22b32ec801cf27af1f68e48ed0a","sha512":"0be86cdbd3d9d20a7ed3548445c10abcdabb9a8e8b993184fa735c948b225c3e56dfa38274a6e00c864dbabf7f9cdcc96cc5225f30e6a41f8f06d5d796c06ded","ssdeep":"192:N6xfWPMyPKod7Uh5jKnedecxT3/3nwhXFAj:AxfO7UWeAq/3njj","tlshash":"a8d19e30b305ba1fdcbf09be525a4b0387596c28461f58df38f0694927d78aafac41d2","first_seen":"2026-07-01T02:28:45.796507Z","last_seen":"2026-07-08T11:55:56.195447Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/prowling-panther.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.201Z","timestamp":1783511744201,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/prowling-panther.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/toys-of-joy.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.324Z","timestamp":1783511730324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/toys-of-joy.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/toys-of-joy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go28jzvrukq1\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7nVraaXifS%2BoWN685LWlZWjp8mI3zK%2FGPMYjY%2FLeV5pbDU9qKPzZOgH%2FX%2Bpqo7vAwUgBJfk%2BoKxALPrOSMAWCYPzhtT5RnzP%2BTQLCoAfJ6sp5KHW9LKOrOcno%2FjrIlf%2BCIybQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a8a52dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26857,"size_decoded":27887,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"aff0ee858cc08f02846b9c7877dc5613","sha1":"09772f948da4a88541297d5008c48da02cd82e4b","sha256":"afb2a09c7755ba8543e51ff360718bbff5b73d2d0ae24ee5ebd937e194084505","sha512":"772a7e1597bbbcda41a957491efcab31ba9f412c68837ce561e93ac2463750511b9d0e0854633122897659de9f1aa1b793c5a122c791868fee9c2ae080953171","ssdeep":"384:S2eSgjZEw4S7FOxNHSXuUZFD+nZl/PG45yuhy5Ig0HDH2rdltGpnCdGLktZ0J3:Stf/4nPyXtfEUChmT0Hj2xaCdYGZ0p","tlshash":"d5c2e1832afa5f24aa3e93f65487e27b83e28f9064dd5d10e7e055526720d1640bf272","first_seen":"2026-07-08T11:55:56.196899Z","last_seen":"2026-07-16T11:19:42.068684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/previous-arrow.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.278Z","timestamp":1783511722278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZu2RQi6ew35T7QwdV3C7w0O%2FKt908oG81RPMeRdEVZX515Zx4wXVwh0RZRsIkLSz478wrqoAmimHRY4whMhwBfo%2FBQl9viUmRZfwChN7heWYet2LV5xl%2BeB%2FvgF%2FlvgFVRytw%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3w3cby36n\"\r\ncf-ray: a17ee6483c84dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-17T09:16:40.257393Z","times_seen":81,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/bloodeater.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.283Z","timestamp":1783511722283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/bloodeater.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/bloodeater.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go1zcyvob3ye\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnYdOd0DDp%2ByLBlYaFqDMgeeZhgqTv1eFp7ub61QMMdiJUKHp3SVlnNNt1AL%2B4wVgKRMplgZcik4rRlJfkM4Jk74r4GkupjIMDTHlDivBKGPosvyPshnTPTFmUc0NtBBFQKPdQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c93dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5126,"size_decoded":6143,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"53ef64ca351b8fdb6ca6b69f876aea40","sha1":"d59e93e1b2d9ce2b4b9e8eb175d7ff4db59e7c5b","sha256":"72d30cfe04ea1073ff9fcb4747d8c1096db419dae2dd445fc6a7c3abff76212f","sha512":"bae2adfb549bc7dab41ed42be1cfda73d59e3581fccec9699d1b5536c7e602add49b1bd51e08f56a151119b53c0e2d71a6a27928618e6d036d547863811d54f5","ssdeep":"96:BGyc84sDhVG8M+7HZGKqN9m5TpAZ72FnqIKudGS34r/72x:kyjfbhEKrJWMFQc4H2x","tlshash":"cab13ab156b12641fc7d7539a8986746b792ed0812c9cbdfbe5d667d4b0d0888c100a9","first_seen":"2026-07-08T11:55:56.198673Z","last_seen":"2026-07-08T11:55:56.198673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/tito.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.291Z","timestamp":1783511722291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/tito.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/tito.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go20olk195om\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kn2eqsDF%2BIczX%2F6ClzZux42OGjmdsAEPRP01OqxJijBYYzY6YXpT01D6imykk%2BW0wheRVosLQ2jlR87PDUyofdPwGHQWq6b5DmkuApuwbddXUn6hV9JHIiq6yjENdOZwTWKIWA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6485c9bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7366,"size_decoded":8377,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"2077e4be80c7bcb6e595434420c54278","sha1":"198d4673c5b6a0a257ec8a6d1c2df340c28edb5b","sha256":"9f340e1269f22bca51aadb1177a1efc197d7e14dd41d8829cc2d070e4fd6202d","sha512":"931b92b9e189da103dd67cb2fa9a1e5c308f73dcdc3c3c6668245d1e1ce34f181227dabb1cc3260bbbc01196e8c907087de1c3ccaeaf1fa295a0b58af2b7ed45","ssdeep":"96:MtZ9Z+Lr8yKl8SUi1wR3SZPqifzJk/DljCp6tfWXAy5pojy1O7PBTt/8+a7ggsNs:WILXmUlR3SZHrJkLlj/fbCmP73X/Ne","tlshash":"32e18df36e22d052cb3f9cb7e16d4224e51bab64841706e92bd72a3cb3180f187191a9","first_seen":"2026-07-08T11:55:56.199782Z","last_seen":"2026-07-08T11:55:56.199782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/3.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.313Z","timestamp":1783511722313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w11l-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WlC352jx6DFKKdwQFtIQWYtMDhXUMxuWuJh%2FVgDhbxiaiYRarBVFOzzmCFWQ%2BCFVg2kpNDM6p4bt5f%2BswazOMdUB%2BBNnYtxsnJitc%2FgnkM5npgmzrPkbZcZjSO4Mk3gD%2Fn03A%3D%3D\"}]}\r\ncf-ray: a17ee6487cb6dfec-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":1715,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-17T09:16:40.294936Z","times_seen":64,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.768Z","timestamp":1783511737768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:38 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDvOPidJ4dB7TccMDbcsO9GQpP649rV3MS%2BwuPh7%2FsmQHCGmsRnG7QnIqfXGlvyHT7B8Knr0b%2Fs29lYZdnbnnPC269q9qzJrs%2BCxID%2FrS7FYOnOg7djl%2B8yUjUoe4z95MaPfHA%3D%3D\"}]}\r\ncf-ray: a17ee6a90f53dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"a7e4ee37f396a5d7f9fa547c60efff6b","sha1":"4a2ee3ca8e582f2f51a90828098d2769518d99fe","sha256":"63e3e2166f0412a11370292588264bb1a87df7718dd0efc0b435453d1fa0eef6","sha512":"9c8966a371c936619e0fe775a812484cbf33623f863ec6fe0b6f5104d8ad281f61dd11f0a6ffd04d4275788297257eca8dd0f2240641e4aefce64ad5839376ea","ssdeep":"","tlshash":"47a022efc880082e0233c3002c0b30c820200e0320e00c002b80cc8008b03020023c00","first_seen":"2026-07-08T11:55:56.201261Z","last_seen":"2026-07-08T11:55:56.201261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/hartlen.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.164Z","timestamp":1783511744164,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/avatars/hartlen.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/frosty.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.284Z","timestamp":1783511722284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/frosty.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/frosty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go1zw0r0p5s5\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p97r3%2BsU6mgNXf9oSry%2FdLf90A7vSEymjhIi9rtWRYixbBBC20M0UVbxGq6p2wX1YcL9SYtv%2FxWdS8PN2A9AsV9s9lGkDFZxAAePCmbtqerCJfG%2FkDnAQCUUJoEeODvXfkcf7Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c94dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7493,"size_decoded":8508,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"acc24e6e50df242d44e7cfb130a334aa","sha1":"d5beb4ce6d3899d8e8ff8b5835c8a6d0bd5898b4","sha256":"b3fd6579fc0894e1e49afcf820bd4b126d95a905516ceb0863d1270890ab7a40","sha512":"6ef67e26b52bbc288a173331eb3ab06db99072c2c5f7eb1c6f507d362e6108d492343c7d8f1a4a7a0434162da2f97e30df57d159e43840004641361278a2bc0e","ssdeep":"192:HqSYfZGiRRefalvg5AM4jEweWF0t5sF5cmi:HCfZGiefsxjE00I5w","tlshash":"b8f1c0036a252720f13f2a317b17e3c9f391622675222b534b688d9c0ff2107b3a44bd","first_seen":"2026-06-01T02:18:17.516038Z","last_seen":"2026-07-08T11:58:06.223325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-17.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.311Z","timestamp":1783511722311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj12dl-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jgp%2BRE%2BLUejBm2TWqeyjnM4tb7M02Ywyel%2BE3F4RgN2QJyjjm7zXi6FhCoBFtYMjiotZOOTkw6X58oxqMP4t5DXcJd5iJ8nRnjMLe1Xb5vKeEJTWFKYycDdoagtfJvUntPQ%2B6g%3D%3D\"}]}\r\ncf-ray: a17ee6487cb4dfec-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3081,"size_decoded":2389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-17T09:16:40.162871Z","times_seen":60,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/18plus.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.318Z","timestamp":1783511722318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vp1xft1ar-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cmtvX00bkoVbY8BCRiDeznsHUdoQXHyU2fvHMYFajohjskUu0pYjJuzglDJnQk4WnDb%2FNTwymD1Ak%2BIrA90XIOXpIpuYlc4ptben%2BVYnmngcfBzCtbPKUkTojerGNo2T70P1A%3D%3D\"}]}\r\ncf-ray: a17ee6487cbcdfec-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":1699,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-17T09:16:40.207049Z","times_seen":31,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/miles-bellhouse-and-the-gears-of-time.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.312Z","timestamp":1783511730312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/miles-bellhouse-and-the-gears-of-time.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/miles-bellhouse-and-the-gears-of-time.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go26i64tdnpc\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXlw75f7040phGNT2Dl75yVs8lxWwZ4Dy5VFL%2B9%2FyVZrQt6uyTKUDwvuC2yIJR%2FREsPxk1%2Br0ZV0%2F9Vq%2FJK7DDUcpQATlW7ENAD71evlCd14Rxg9cRGygbJTGkoABZzrUDcvAw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a7a4adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30720,"size_decoded":31768,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"110b01c0f3409f7d97be9fef818f5566","sha1":"84eb3ee2c0edb46219a96219e3a88f1dd25a7c90","sha256":"3c076457847de40f893afa52f747c6dbb015bb39567e41d7df74b84a96ab394b","sha512":"5fc80a8d0ace1158488544816ca9b64b4f06fe347880a459f49841e1f356925fcbed1cc9dca6a3c16b4527d3dfe786a825a04750de0724997db5d7b061819460","ssdeep":"768:KnCY/LSubCzLpTsuhp5H5SckFlZZkRDL+fwaOPaBd:KnH/tCzFsuHV5S1FKifwaGaD","tlshash":"15d2f18972084f0bccfcf767c4668142e17ac0b9275e197bbf0c256f1bb9492ab160b5","first_seen":"2026-07-08T11:55:56.205244Z","last_seen":"2026-07-08T11:55:56.205244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winner/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:43.828Z","timestamp":1783511743828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: hu-HU\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"926\",\"798\",\"355\",\"857\",\"897\",\"109\",\"606\",\"937\",\"47\",\"714\",\"421\",\"910\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQD%2BHOnVQ6wa7fpemKNdOuJqqS4%2Ban38aiBHONdh3RSyTTwYzo5cqTVSqEkmn7GMP0Qye24z%2F6%2FIrr6MeNaZUyrLhInMIrX5XEXcf40mZ%2F8YLI9gP9%2B485SeL5dSzWceCzw61Q%3D%3D\"}]}\r\ncf-ray: a17ee6ceeb53dfec-OSL\r\ncontent-length: 208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":1201,"mime_type":"application/json","magic":"JSON text data","md5":"31bd33e6e44bddc315b59b1d724b5d4a","sha1":"ec98f956622f9d4bbea574cd921b8194f9079f59","sha256":"b4f5ab8e74085f1f154e05d47f36da30e9cf78a63f3ac138a2aa9e3f92dafed8","sha512":"6d30cbf96a9976e3f28498651570da2b657cecae690b484c4215d73b46c65e2ec39895a6b414a0a107c074982185175e5424c0efa19845ba2ec119de9b83d359","ssdeep":"","tlshash":"b4f030526e52a63fe18360d0dcb3afce5404ea52552d4438bebf19a1d3365205e8874c","first_seen":"2026-07-08T11:55:56.206733Z","last_seen":"2026-07-08T11:55:56.206733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/western-belles.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.186Z","timestamp":1783511744186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/western-belles.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/western-belles.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go28vwjv2pv6\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFXMwD4QM7hs9F5ZJAuBOv1y%2BmEIlrqynwnGXP0tYzeRMSh86a6nxnqt4eZaz5ZFRD%2FNyjWs%2BdfQJ7OGluh3CjaIwla%2BymU0eYTb8ykLhvgYrf8inJtcyaFQfBr%2FkKqOL9gH3g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d12b94dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33522,"size_decoded":34545,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a074d40571c93ba773f6c6c8d0a4b6c3","sha1":"cd1dab1f1edf1421e84cbb96de3309d9f33cd7dd","sha256":"e835f38002918f1a691296fbe8d97b0a769ebfb29f334f0ef74004f0eb1eca2d","sha512":"a52ba84c54eeb8a37756c15b8136dec79f6f98e78fafa3eebc4f62e443813d19ad066f825f8af3dd58d249e6c9d15e251134b6734187c23d364ad7249eecfd8a","ssdeep":"768:wFW+csTx0HYO9B4iiWFlZvkoJCg+M/JIyBZNlBb+NN1i5YhZZ:F+NTFY9cbv29n+NN1iuvZ","tlshash":"55e2f11b4fdab07bd1d53a8959f3114d9deb2810a0fae59d5cc93dd3a7a012f225a30c","first_seen":"2026-06-11T03:08:59.258301Z","last_seen":"2026-07-08T11:55:56.207775Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/aliens-attack.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.269Z","timestamp":1783511722269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/aliens-attack.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/aliens-attack.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go217nfdnfip\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7OGZPAG78H0tjtISRjr1BvYgBI8Dq3rXr2wkk6B8vJbL8kKkpxOzdyRf%2FNvE3keBIlO9tOt7tEulhiV2FS2ia5lyodxEddXUk024bBAu%2BTG7ITKwkZUa0TqnImoxNz8vYyhxA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c79dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20113,"size_decoded":21129,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8bd7c9110238a4b9aee8bd58e78f129b","sha1":"5894fb850143c7e2104b9cf634a5f10e2df76d99","sha256":"8e34cbb338952f188f3aac909bbbb27151e2ba4207aecbc4d04f5b585db6437f","sha512":"321230a4776b9ee41992ab22b78b16cf0a82650ec095f809b44e372ac2d2eacbb2a693eefc8497d6dac096a36b3147ff248cab3a4d1a6bb20af794b1920e6687","ssdeep":"384:kFCTNwg/AWocRK2Ynjhm9LZgJqKh2qnFaY/BDT0EpJn5vvZ5S8XkZ:JTNwgOGK249mLmhfZDTBJ5vx08Y","tlshash":"4892c0cd0e9b9e01ddde697a8f48e92ec7a0f612a28f1357dbc0d5290f4d44184de6a4","first_seen":"2026-07-08T11:55:56.208517Z","last_seen":"2026-07-08T11:55:56.208517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/monty-python.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.274Z","timestamp":1783511722274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/monty-python.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/monty-python.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go26kjv8fkrb\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnv4sCK5s6vTlE6h1WGjeoo33UX5qAuXKMQpKK0GOaz0sxwB4zNLbC3xYXUOfeePYuCOhttoKbvrnmkHoPiIzpEEoL2hfE%2FXPhttJi9e%2FOD8bRI2HQGuGVyaT4mguiOQfikTDA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c80dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26903,"size_decoded":27918,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b440ef889160d9513f407d6544ff6255","sha1":"79635e2314b092977375505b6a2f0a4a66e1f875","sha256":"869074c5ca7d7d01cfd35dd6078a59835e2ba79ac94856e4efa1181d68d0dbbe","sha512":"a0120f2f7b3af1e76f45ad38ae81e6494f4a6115068e9e0a32f16067a27804b376f2c179afcdfbf5e1ca35584765d2679f3efdaa314265f5d4da4cf51c4b55a2","ssdeep":"768:PZhjYUt1g3CNJOS2l3ki8vUi6KQAh/kbMeR2:BBNQlxki8c1K78bN2","tlshash":"64c2e06b2fda7518cd2e3eb19bd0f13194c7e58de9026c3915951f6887087ed4f8c4a0","first_seen":"2026-07-08T11:55:56.209633Z","last_seen":"2026-07-08T11:55:56.209633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/open-graph-image-69b6d07fb84822.34745344.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.294Z","timestamp":1783511722294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/open-graph-image-69b6d07fb84822.34745344.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/open-graph-image-69b6d07fb84822.34745344.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3gzz04nbwg2ads\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbF4LsKoUcQvzsSsICStAyV598iGxK7RpY7aFazW08onfLFIQZZ4JeCZBMwxaSy76W%2BbMDRaWf4lR9KbrRGhr2LR6fuJrmDENyDsIcqLC86Hyzx24kaFmVgPuv1aTFFMZ2calw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6485c9edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106768,"size_decoded":89169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x630, components 3","md5":"da77e3072aa9073f70bb446ba4cc0c38","sha1":"d6b8c3b7c9d31062c082368d942e2233ed6b554b","sha256":"451986675712bfbb76874d058a47679ecdb2e67613f300e1e3218cebcc164811","sha512":"161c33ba5b318d6df3dd3bbf37f00c166d7186a74ce61bede17cc6ab7a6d225da7937343446d084ea7668daead33afd16f5adca315a8363ba152f37935eb20e8","ssdeep":"1536:JLtjuoKBvlTrgMYpeIs01kx5pbn8QANU1HM1yUwzU0sXGCe+Dp4Y8J8j4zSk:dtjuoKB5EQT+kx5p7VVMMdAvBdQ2jo","tlshash":"d2a3e074fbcbcb2a0b9f506cb67d3e7b1b4600ca44d4610362870d49ea68f7944a79bd","first_seen":"2026-07-08T11:55:56.210424Z","last_seen":"2026-07-08T11:55:56.210424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-14.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.309Z","timestamp":1783511722309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w2nr-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgI4yr6WU9Bs8nnStNM5RWlJGMjFomCzGJL4aR371hX%2F35dJxouULnJapc%2BG221NYOBH9NOH4YhR07%2BKdAjNKQ3DWk47gAxjV%2BUuhBA%2FuXoFBrPrZb15qsd27Lc%2Fxx3dLtyrOA%3D%3D\"}]}\r\ncf-ray: a17ee6486cb1dfec-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2412,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-17T09:16:40.315493Z","times_seen":60,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/banner-rectangle-69b6d07f5b81b7.84394223.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.128Z","timestamp":1783511723128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b6d07f5b81b7.84394223.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/banner-rectangle-69b6d07f5b81b7.84394223.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gzz04nbwg31h6\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGdQ9wgI%2BSxUu6y%2FmuMkPkZQeyCThVJKL%2BLYW3AZP9Y%2Bz8EtW1wYr2rw0KK%2Ff8mUdHrm2%2BX8MIOkPZbaXrzep1PWAQgIWUdRjx02vb9jXXJTil3c8wEQOxOwturWo9YKh3r0gA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d8d8fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141882,"size_decoded":142946,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"323827667651877ba43b2fa954cc781e","sha1":"4096e9d0140fc009ad2210c5586f377f09cf61bb","sha256":"0a2c6fb45894d779a08d6633275ae2eaa01886ab79becafe8f8e73aaa0131f70","sha512":"94868826ad5ce8e9c35fc2b40df7f02b3d4ad774c62b6a8dc9cdd37574a56795c9104cb8dd4d8527c80c1ae3be2c59905298ce19f08bc9e476177a8018204a14","ssdeep":"3072:fz8sXNIME+i4iVvC5iJiCIcbacSyWjdOcKPCyncUZ7:L8QNk+c1JiCIoavyWj5Kpn7","tlshash":"36d31236de0936c4833d08555727baaed27459152808bba0c591bcf0f5e57d3acb3b8e","first_seen":"2026-07-08T11:55:56.211834Z","last_seen":"2026-07-08T11:55:56.211834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/luck-of-the-irish-megaways.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.184Z","timestamp":1783511744184,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/luck-of-the-irish-megaways.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/energoonz.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.205Z","timestamp":1783511744205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/energoonz.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/energoonz.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go23e8n66ek6\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybJsFw%2Bk5D8l02mJQdtFRcj9Okoab1K%2FQKvcwvUYRGAFV9Mu6Xa4c9dG8lH8lRXFT3%2BVMHiyDpD2h82zhsuBFJRbgbRzUtqo4agaYa%2FP28CXfX707O%2F9lhFuktv2zz%2FV%2BwVk3w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d14b9adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18870,"size_decoded":19892,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b898d394aec64432c614236e65553c74","sha1":"a414be4c5c8e2906f50942cd194d4e1f5b3afa3a","sha256":"7b5a21e416a11375eca771400e31fbe5f6083c4514001e70d04290328aa0e0f8","sha512":"d073aab1e9c44358dfe2745ec9f7943ab9b9077830310d261ffc44d748a831b0565be4e52459cb637806f1c6125590553c66858f63afc21764ced9674bedc34f","ssdeep":"384:JRQIDXUFI4siFK6Ijv8Vs/mNrFPd00AzeI5eIzn:4G/6s8Vs/mDd00vCn","tlshash":"0a82df873b848b04cdac3a364e955736aa864c706de24c6a1a1783dc0bfd3b40e466f7","first_seen":"2026-06-24T10:21:12.941249Z","last_seen":"2026-07-08T11:55:56.212787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-3.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.298Z","timestamp":1783511722298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj111j-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUtCxagNCmFSuk%2F%2BS%2FX%2Fh2JMQA4H48ndoGDxY%2BXVOpHFtYTswLa9tOAalr%2FnRqHLhac6Xga9QdExPECseVkZffA7z9mxqpqjNrukPruCv0Xtu8xvVdVSI9vndpbtWaShS9%2F8cg%3D%3D\"}]}\r\ncf-ray: a17ee6485ca4dfec-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1351,"size_decoded":1731,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-17T09:16:40.191799Z","times_seen":60,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-15.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.309Z","timestamp":1783511722309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vykv3z16j-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIwKEwMjq5%2FY8JVs63bqgDx7%2BxwcS%2FCEXtcW2K6fMO6Qd4AE2tX29UezAEqCHRwPN%2BXYwfnbcFHAmuE3x7gwdD4CCTnUmqLHDq%2BdTRVA7ftEXuXDYbhdptXxVmVqmIyPlSA27A%3D%3D\"}]}\r\ncf-ray: a17ee6487cb2dfec-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-17T09:16:40.345025Z","times_seen":60,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/be-gamble.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.319Z","timestamp":1783511722319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu20ob-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iNvgaaeKFKP8vo4pZC5MQjf7VYcIfXN9KZpw0fe1Gh6M%2Bo7I%2FEMkMOFwfFuFYiY2ElDQQo2E9TzlJELbVcF5F%2Bdeg3N3tRX3vxGaj5TmCeP3uw8N2Iji7tx69D5Nu3RFyJRIA%3D%3D\"}]}\r\ncf-ray: a17ee6488cc0dfec-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94187,"size_decoded":44541,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-17T09:16:40.352596Z","times_seen":33,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/orion.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.208Z","timestamp":1783511737208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/orion.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/orion.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go26u2swmmn2\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayGH2H8kcvmwtmgSAtst%2B4Im6oZbqmSU4h8T8EJ15JIEhsU03JwVEVxlgxSjZkbVFLETIA%2Ffp5a6RYCYz1yK%2F7M%2FPagaZDnt%2FJF4nlYApRIwJjtSEdTVA59fIGvk%2FDYciTAIag%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a58e5adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29342,"size_decoded":30358,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"c6ed232fb3c05c6e3d3f7501fb212be7","sha1":"4b142819a5775724e1fc5d2d9e6db2c820fbbdf2","sha256":"5c4590bb6d085240bffb7a8fbb1cf390efbeb91918c2be1ea8f2b80e1bbb614b","sha512":"40c6ffd3083de4c5e4918f4b4b05e9bff4ebd5213e6b46fab767ac11f19d7ff167936f19bc4c7559c855e721b4593d8d493ed8cbd9234641dd27fb7b3e93a456","ssdeep":"768:uv8lz5IBJUoHzqRyhaGFmdBxb6QQ4dvobVc8Ws8WHR:uv2qmoTqgha5BFOevopcAx","tlshash":"d4d2f15457c26f134f0f003948589f8f77cadb5a5c8c4db35e639aa107b2ea8a8c4af4","first_seen":"2026-02-04T18:36:07.4522Z","last_seen":"2026-07-08T11:55:56.216554Z","times_seen":4,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/arabian-charms-slot.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.216Z","timestamp":1783511737216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/arabian-charms-slot.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/arabian-charms-slot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go21cew7qnhz\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYFOmM8%2BxrVIgm3DHFFQ3hxdfSh6U3HTG28rNvF%2FmsamnNBgcwHOvaQWLJMW6Pty4b2X1jadbQnezpWvlgJKEqrUcTejZGueCRL8YBFcxdhAIXfTuODdHVF8wdWP6hnhgZmiTA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e5edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30455,"size_decoded":31477,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"db1db47e059ac54c02658d0a31f191bc","sha1":"2689218432aff992aa0d75ae86420d8bf3ffb8d7","sha256":"23c7f2755b885644755c73e2a50bb85f2833dd933681918f2ebdaecb90e1b3ad","sha512":"63d8360d28a18971e9ff1d5ac1784d67b7b04aa46cce1a778c20f062f6f0b224ce418e0eda9bf1d3b3a6d7fba4d94761186ae77e8c5eab7eedbe1ba122e502a2","ssdeep":"384:+erucsowE/xM6lQGj8H5OO3Wf/EcHOnIMaWAI+8mzAa8Zl0YRWuRufMj+9LlMQnt:+eSzsqOO3CNOn2Wm782Yf+1/PehoVZ","tlshash":"2fd2f17faf66a186b8bf9d703b19104454b0ce007692618fb53e86b437ab5804158fef","first_seen":"2026-02-01T16:54:15.927385Z","last_seen":"2026-07-08T11:55:56.217604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/fa-cai-shen.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.219Z","timestamp":1783511737219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/fa-cai-shen.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/fa-cai-shen.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go23j040aqre\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srv2Wufr6nyE675muGxq5OoNkMZ2H8XDtGxS2rj0xENWlL2lfpwcwk%2BekxUKCZZByddtQWdjDLMv044DibQjxn7rV1gXBvQ3%2Fr9jZ8wsm1XcKJZuF1NFEWJUwG3xdIobwm%2B9pg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a5ae61dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34682,"size_decoded":35698,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a2c0a792a00047a7e20398a2ea595de0","sha1":"137820d0f2ab9225b4a6f7f8c9c15a0094081faf","sha256":"de8d6586de4405f8914b6862ce9c3ec41c1ee9448805d9693acc0e4688a31b45","sha512":"605455496a9c033d1c40a8e72c6f5ff82d353582e61bfe2db6722e5afc1b9c582ad3f855651041234c7bc8ed8a0c55d46a5291d39d9e06f04e771419c44fa2a8","ssdeep":"768:a+lUv07+WXkByobwDNjOEM7uEa6cdYLcnwOs0C5OBuGWzrU55p:aBc7FUIswpjyabYwnwOiOBArU5P","tlshash":"dcf2f1cab76dec1fd90fb7e182a702a281d5bd256ac863191df041317ae6ef0e4d5530","first_seen":"2025-11-25T22:34:39.255138Z","last_seen":"2026-07-08T11:55:56.218824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-16.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.310Z","timestamp":1783511722310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vykv3z18e-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQ6PycKqGKeNfeALK9rQpU9fcBe15YnWmUGcNmeApqkGB56ik65X5KoyFRERnVnM4Ffl70H%2FrpeWlrFF%2BF2iSVTeC79tsjpf2hX4Hlo0Hyk%2FGkyC4CMZeVe0kAttF67LNgj9tA%3D%3D\"}]}\r\ncf-ray: a17ee6487cb3dfec-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":1779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-17T09:16:40.369454Z","times_seen":60,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/so-many-monsters.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.180Z","timestamp":1783511744180,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/so-many-monsters.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/princess-of-paradise.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.191Z","timestamp":1783511744191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/princess-of-paradise.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/princess-of-paradise.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go273lqktv3y\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMc6OoN9r4KsgDED3L7H8PpF9fxUqoTKDDO1ju%2BYrELQ8ofDDsBDzTuTg7I7RVOoM7DkjTYdhqKaCHjlsnuYm4S9jwhT6rSsd8LxH27IDPm1tqWQkV%2FuNp8ZiS5ISKb6VjtZsg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d13b95dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40318,"size_decoded":41341,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"832b3a3564ed5ad349a39f302a718e48","sha1":"d7d4bfab0708594f28276b1301ed2b84665e1d37","sha256":"b3fb8d6b253061676ebc352d223c9821c3bcd2234d22bed604865b26813a58c7","sha512":"8d55eaa4f51f5d30b8bf4e9972b16e925e2b2c88b5804a0a8d1c4d1635774f033266e32ae3a90f26a2e20f6e09f868c241541c34d609d164c3ba655e02337d8c","ssdeep":"768:ZeaOneJ9Dn1V2rIOMY3SiHal9p+m9EkJKPTgkTthWsYTeOtvl1DXIuaIdm:4a4m9D1Vim+mCkJM5TtxSe6OIE","tlshash":"d403f2834f84e67ebb78af328b2e1c117c2467e8ee468d4b0af58026a77854755531f1","first_seen":"2026-04-03T21:46:18.136412Z","last_seen":"2026-07-08T11:55:56.220283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/miss-lucky.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.289Z","timestamp":1783511722289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/miss-lucky.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/miss-lucky.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go205joov45n\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Je5Y1BwpDdm4%2BB08%2FMqI%2FhHuMkiFbwmkpRdJrEQnXeWuL7I1c53vqjYNBYGJ6paTfCH95JQNWj3bcQYQ%2FryYs0BnbcdWYmzKYzR484o%2Biu9omoCbdtfzIL8fbrH5Wy4dxkMA%2Bg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6484c99dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5387,"size_decoded":6410,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"684238f8b78f4ac5fb514377ddc836c2","sha1":"a1d69bcbe3829c1a239895fa9817c3981321a2a7","sha256":"66394bd884df944a749371fd6e427d3f26fc3893894bf817636bfc3270f0f2e4","sha512":"412225b2ba4e7361dcd03fc9aa8b3d9c77d5376e5e14af6bd57dc3a660447dff36fe3a1c0d0b7c1266140a7d943f58d8cdd4ed3c119d267c068bdf7e20e49555","ssdeep":"96:V9HAGbgiUPenIe9C5jHcv5WL1g/s/szyfzqI5rRkgaff91pmP1aEkqltg3+nwBAn:HAGrUeyriWR/s2bnrjanNDqleCwWn","tlshash":"07b17d441b7a80c7cf3d9af50ac4e6295f421e7356045f631f944f1aa39e778c9b8861","first_seen":"2026-07-08T11:55:56.221367Z","last_seen":"2026-07-16T11:27:37.715847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/4.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.314Z","timestamp":1783511722314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAu5fT%2BCu1b6qo89rVtinGlqPyT4k3wenziHgTBTtulSWQroOlajS7KKVER6q95%2B1%2Byc%2F9SJi5uCANizBOsk8qvd8jRFSuY2S82yMcau%2B%2FTij%2FS0KHhP%2FaUw49Y6c5qCj60%2Fxw%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3vtte9wdb\"\r\ncf-ray: a17ee6487cb7dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1281,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-17T09:16:40.271735Z","times_seen":57,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/winner/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:36.827Z","timestamp":1783511736827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: hu-HU\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 84\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":84,"data":"{\"exclude\":[\"798\",\"355\",\"857\",\"897\",\"109\",\"606\",\"937\",\"47\",\"714\",\"421\",\"910\",\"340\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2Fmx6zzt9%2B5QHzza3oF451pa7jzB94DetormLmSaAccii249xqcY9AmX1GbSxfNR9ilMkk1a9OGhE7DJxeQmQRym4f%2BmFi%2FeAcqTlLwY7gsnLS1QiaaqPjuFl0Y2ncVGCLI07g%3D%3D\"}]}\r\ncf-ray: a17ee6a32e21dfec-OSL\r\ncontent-length: 210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537,"size_decoded":1199,"mime_type":"application/json","magic":"JSON text data","md5":"4dceac06e7ef322fd1665be2cd2aad28","sha1":"00b0abb117fa7998410c88e855676d2d04195de0","sha256":"edf6a818aeb89334b376b0380a62f3791097b76d31f3b2de835fb310b825fce5","sha512":"e1fd7a3abc3f5285fabcca1086f8c66c0fe13eee87a211c508aea3184f5248bbfd95e737701dde9e302b9b186e736ead73d27f80cec606dd3f964e6fda2d4182","ssdeep":"","tlshash":"6ef0a0122b12a33fa18350d1dcb3efde6410ea53602d4434bdff09a1d3269002ec870d","first_seen":"2026-07-08T11:55:56.223668Z","last_seen":"2026-07-08T11:55:56.223668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/dragons-wild.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.206Z","timestamp":1783511737206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/dragons-wild.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/dragons-wild.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go2373fx1ouz\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtLkgpLyM%2Bal%2BcUiJ0J0YoFchZgYf6tbiXyx5vmtG894vHz9aQNmFlxeGZaYUFfDIQxHdqIP3YCowOVwYwRxcP5z6hIAjyyK99KmY9Y%2BnMfBq2FPX7dHrqQaXD8GGbTjqqkKZQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a58e58dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32219,"size_decoded":33236,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"54be3af367abbe9dbeae4d7ebc2952eb","sha1":"8080e97b74199e2bdffe570913578278c32fe429","sha256":"707b54d87f41528cb123392f2783b171ffbba887add7fb591fb16204ec565855","sha512":"beddf8b1b6267483f833623c349df86d5aab17645da2ea9df23788ada56c4f8cb893f82c411d0ae384b20eb219872e1402124ffd050ca53b14759c99a54db9f2","ssdeep":"768:KGdrWxMxUW/Qgb+vAcdSD6oYXAoSfYOjgcGMJsHCx5:JrWa3GfxoYXAoSQOZdu05","tlshash":"6fe2e057db0a76c9d82d5432a15e6237657ac9e5c93c1f63c4406fee8f328ca7580fa0","first_seen":"2025-12-04T21:09:10.750622Z","last_seen":"2026-07-08T11:55:56.224522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/big-bass-bonanza.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.199Z","timestamp":1783511744199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/big-bass-bonanza.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/big-bass-bonanza.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\netag: \"dh3go21obkayo8u\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKqqYolIPTSzd5CVDgl%2FxyxhDY6sdp5C20G83s9H%2FzBTeYH6UkZ5oERZfibyCIcYpotqAwSzXR%2Bz8O9s6j%2Bp%2FLht3SFhjskWkR3NqoiB9JJoi7rYTSCoxXSU6GbkajJ9LvSyoA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6d14b97dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/build/frontend/runtime.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.250Z","timestamp":1783511722250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3gqk509uf71jl-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWV%2FKLLQqn3DbMueDiherN%2BylcekXN6XDbVGg73DqnFkAaAIocN3FK7Pu1G%2B6hdNfeNadaEISO5zdoleWQ4Yd9Xircfe8x2ICVQmgtJb9W6fSec3vXReEstg1mVG7pkg%2BDPQig%3D%3D\"}]}\r\ncf-ray: a17ee6481c61dfec-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2067,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-17T09:16:40.199202Z","times_seen":107,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-9.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.304Z","timestamp":1783511722304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj116g-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrUEGsd1Vca29S%2B4oUMQM0Pb5OssCb3w73YFS9Q4K%2Bcv1RWcxWzPcEAIW%2FFUIE6NcM%2FEeK0O1eq1Hlokiyquua8snccES5Wxsy4%2Bic8p7O6kevG63RwSAqrFXSJd918uU9I3aQ%3D%3D\"}]}\r\ncf-ray: a17ee6486caadfec-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":1567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-17T09:16:40.232759Z","times_seen":60,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/hugo.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.317Z","timestamp":1783511730317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/hugo.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/hugo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go258x6vioxc\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zD14u%2BqntjEpZ0ZakXRWd4DtaeKcz84g3YdnXjuzqJ9tfXaP6tDvUqjDBty9Ij6IjhcQAZgWdn7Kr87gYySsbpcBofp4fSKZeTfrmLz07xqGNPth6CnwNDPjfOi%2BAabNLQw5NQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a7a4ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32304,"size_decoded":33311,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b343a1ef2b734b27774b82114c6d45ca","sha1":"705ac3b2af501f59330ace205dc44873f8e429ce","sha256":"903d50210ed2c995e9c910cc36ffd6708bfb64fcc6d35458cb82f39ccb2db075","sha512":"25ae197826f6f1df8c50053300c4d79f7067139cfafe32610aa126888abf1ccb17773db30b80fd75203233053239db000fbaf1f15da789e6fa3cf407732ee827","ssdeep":"768:ZZyHFrNyFI93AcJwGcCafFTis9mmxIEmNOVchOUS:ZcZgK93AocCafEpNrOr","tlshash":"f0e2f11af09a414bf91f4539f1a76bab93084fc479353d0308a844196fea5ee394ce7d","first_seen":"2026-07-08T11:55:56.226429Z","last_seen":"2026-07-08T11:55:56.226429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/crazy-7.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.326Z","timestamp":1783511730326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/crazy-7.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/crazy-7.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go22o1kkokub\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Adpd4SQRklotfbYZLhC%2FUlqdCPnrnKSByt17YFA0011dZqt6gP7EZIYIfQ1UlSUyJL%2F4qfsO91X4%2BE%2FuFp9ZHgiGUcJF%2BlfafnmstmBtzctApKPi4b3S51IWCanPjQDLSzDz8g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee67a9a54dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27011,"size_decoded":28027,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3eb2343df0ebb3a30efd2dc1919fba61","sha1":"7b1eeed4d406e3984acf08c9073937db16f04d24","sha256":"6649007baaa03abbe4abbbe55e3849e383049da630535772b43ce6a6e7d52256","sha512":"68464b1b4fe59f5a9848f3338ce1472ee205be07355691b646022b832157dbd3a3899b815806f8ab19c6e04f5726d053f6c6342804168c50bfd3695bd21a7223","ssdeep":"768:xN32ARWGMogLgO/lTTlmdjz8ri6TPPk77tA:LtRWiIlTTSu46","tlshash":"e0c2e18b33b150a1f89c74f285e76c31ab13ad8b00563dae4810456c77bdaa14eb4dee","first_seen":"2026-03-21T02:18:55.652098Z","last_seen":"2026-07-08T11:55:56.227389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/china-mystery.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:36.080Z","timestamp":1783511736080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/china-mystery.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/china-mystery.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:36 GMT\r\netag: \"dh3go22gwdbjw8u\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaTSVRl5ziMLnUFFZTuS4PEPCzBFqmw%2Bq%2BvP4beuQcR6KmUEIOJcFpwUHvQClpAwc9emzKTK%2B%2Bd8TQqV1UIkfboL0mQV4NgizZnFU7rHff07ovjgOBlx4b3AXW4KdXyOBQ94ZQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee69e8db8dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41790,"size_decoded":42810,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"29862ab457f15ca0313f5acc0cf1b799","sha1":"17d481206bb5e0a813829f8d336437677ba6b950","sha256":"210b7118d90bef27045dd7ce85e2db1fc329443a35f399d77c1016d5016c0b63","sha512":"ef26ee7049fc1f443dc54228cd52e870ab01d576850bcdea41c65a16590c09121e3af53f2ddf2a0c5a6b750a3a5953c26f3f5fb2ca0f0abc034d6ea787cb8390","ssdeep":"768:AfsdXWUMa2dYnS90S/tgSpnA+ZHsVim8SqE0Kkv3sWwS7TSM2a/7r:AkdXj/amS9L1gV+ZHsVim8cRWwLMXP","tlshash":"4b13e13e6e52603a8b6ea037185f9051d4274c4fdcc89fe77969434c8b322ee716c7a5","first_seen":"2025-11-25T22:34:39.237313Z","last_seen":"2026-07-08T11:55:56.228512Z","times_seen":3,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/diamond-cats.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:37.210Z","timestamp":1783511737210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/diamond-cats.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/diamond-cats.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:37 GMT\r\netag: \"dh3go22v6rttlyh\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPJTLjPWipEh67vD1IaZgOBjelloVPRnq43mmUcYFwUC7hUbkM1dCBNamOjUcJrh%2B%2Byd%2B06iHfad7kfg%2Fz4MlE8y20dToBGl6L67mg%2BuXSVqHVC%2BSuJpqvK9iRjnTnwWiQTO3w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6a59e5bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28457,"size_decoded":29480,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"55a45a0d60896d89467ef093c6a47061","sha1":"83c23c2953a9ee7e345700af5f95d3f3e3ab5b3c","sha256":"4bc21c1146b53282abeb2fdfa7b8c4a02b3b80fd4311c3e6d87ab73f7fb852ab","sha512":"793683bacfb51d85970c4d3ba823f35becb24d3444d13d8da2d6260912568751b82643e9b921a714784086933a12306b4de7af85fc9470579e1ca754eb2cb5d4","ssdeep":"384:xMjRYlGREnmwc8Po4zCzkD8XxvCEjdJNRassYyOYpKDRZhXGCppamlUd24/75iO:IrIy4zCBXosL1sYlkKDRPXNpPS25O","tlshash":"fed2f1623e10c71bce2fe72ad75ed18603f80945f5248f1266cebf86e3f59688650a19","first_seen":"2026-05-27T18:32:05.420896Z","last_seen":"2026-07-08T11:58:04.310401Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.257Z","timestamp":1783511722257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOq2vAzvtw3qE25hbLoq737Ysx6BPT0d3fL9gYXPpCj25Pp1%2BIcEj2RY1QGTZA3bZBqpe1VaxtQnSNjOgcLhUfOxvECSBbHZOc7q7CXgRUpHDwPoEhx%2FVfm3tVLjitW%2FzK7uZA%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3vrfnuu9v\"\r\ncf-ray: a17ee6481c67dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1181,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-17T09:16:40.299944Z","times_seen":46,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/play-green.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.259Z","timestamp":1783511722259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w3cby3jz-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbujnHDTAZhrFR4kHqy7RNGmz3YEXPx%2F9meQ%2FZbTpW9yFOpiL6rmgm2Y%2B04kXr3QYf0lAAs8VSjtw9bF4rQM1rRZroN%2F%2BsTd2JHPXiBiiLCyv4R2A4zPFc0CBsA%2BkfChdU49yA%3D%3D\"}]}\r\ncf-ray: a17ee6482c6adfec-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1370,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-17T09:16:40.263006Z","times_seen":28,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wild-catch.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.268Z","timestamp":1783511722268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/wild-catch.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/wild-catch.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go28yaaa4hbn\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2EUMl%2BBmfOG2XjLuehflvmlvqKvRu7x5tDBh%2F1e732duI4m1RRYrb0vOBB2KrU7Ratex9NSI607b6ZYmAlSHb6WnvNNJ1bgscaNE9BXuWMv9eaRTJhw6bWe8RrjGuP35KqEBg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c78dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22451,"size_decoded":23464,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ddbbe821cdbca15ef9a5883e37a24e34","sha1":"1ba25bcda0a37e89a01025ff5bbf11b38ce9a644","sha256":"7af1d3fb43fe1976f7e9b480fdfa6f110922070f58c032b91be35ed3f6d224b9","sha512":"607f40727370f8ae052615ec8dc935dc4941798b3a60b5ec60b4e3fc4d073ed10f8eec3c3db57bad77fb360b8dde1247f195093d2bcdd840434e800cb93a20f5","ssdeep":"384:YVXCCNx1Gl71UgfN0NqhfTSq+I2RCZFx4FJ8Sd5/kRaT4jD3yYL8eNt25a1A:YVSFhF00b+I2RCb6FFD/kRD3Dj3ya1A","tlshash":"20a2d0b6892a0c0fedcd1b7251a025200379cc3d6917678ad9c5e688c7ba9dffc62347","first_seen":"2025-10-09T01:23:42.85392Z","last_seen":"2026-07-08T11:55:56.232879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-5.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.300Z","timestamp":1783511722300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7WeBeODnMN6LP%2F6ReqfPxt08LVvlFtEyGk6ioJbqbJDfDvTQKhv1c0xVUxvQB5k1b4M9txa%2B0WDFFIKtjuiH1Piw%2BE1Wttb%2Bth%2FqQ2xggTn05lb0Et9RTUGzAxGFYokkHzhlA%3D%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3go3w0ylj1db\"\r\ncf-ray: a17ee6486ca6dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1286,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-17T09:16:40.270524Z","times_seen":60,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-11.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.306Z","timestamp":1783511722306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9wi6-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BoZLNZewkStB0guaqJb3BAc7RLWpxm%2BYuumfjri5uc%2FUhJL%2FFYbI1ReZW69rgdJ8EcKII8xCQR4PC98uE5gMPrp5lq7E%2BWTkutRKUbj8Ol7vw7rc%2FzAc0csv9TNgcccFlrGbg%3D%3D\"}]}\r\ncf-ray: a17ee6486cacdfec-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":1380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-17T09:16:40.305896Z","times_seen":60,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/2026/03/baner-1-69b6d07f6a5c16.32887830.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.114Z","timestamp":1783511723114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b6d07f6a5c16.32887830.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/2026/03/baner-1-69b6d07f6a5c16.32887830.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:23 GMT\r\netag: \"dh3gzz04nbwgea2n\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CNYYQx6sBRLwHE0f7ZGbZaur4gB9ISrdCfuoLZeCYGWZlqg3pIhZH2%2FCctVV1f6f9m%2ByNPuSKBqLjTqx1RORYu2zDsfc7uzl3K2Q6lrakPNSjR9Kfnp714KK4Iq3oMFnD0Vpg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a17ee64d7d85dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666239,"size_decoded":667336,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"c2b9a3a203884e5cc3c6033852e34ca2","sha1":"807f2b27310cf5d733e44a6a46f9987280ec317a","sha256":"95d74e0e98f0162d62cae005b8ab96c29a99a6d16a78627106d089d4833a83e3","sha512":"8f67f5570bdec724a4ee3c5a64590dae642dcaf18e97018e75f7193b613786f0faf578bf64ba3a78e0edb3904b1283c1ffc174408c1f2e6b7e05a480c80e381e","ssdeep":"12288:bU/xKOdTkKUXknXdMmxriT99ZhXhHV30Hfo5d6V6coj8Ooeslt5me:OEaT/r189fZh1E88V6SOkF","tlshash":"4de423dfcfa574bb42189f85f9a342480ebd537027588ea542175a339c2db2b2d12d3b","first_seen":"2026-07-08T11:55:56.235664Z","last_seen":"2026-07-08T11:55:56.235664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:40.768Z","timestamp":1783511740768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:41 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqRmk8Z4wJMGG%2F2z3paAp4%2Bn13b8pSWUKtrNwzK3KiXUYqkHzc%2BptZYd1goHwCRNZ7qiNVWWH5MwnVEFaj8s1B2CCh7bINJjFg4HcLnhp5nVkIXOQ5NO1jloVjVp73fawxNYQA%3D%3D\"}]}\r\ncf-ray: a17ee6bbc90fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":94,"size_decoded":1047,"mime_type":"application/json","magic":"JSON text data","md5":"09a3275960b4a90f3c4926c76fe7c441","sha1":"5fef42fb3cf708efdb8911b1703e6bc27e7d65e8","sha256":"2bf6baf309d649f1c378c2ea951acdbd6daa4e3d34a99a00c58d857efb6e8a86","sha512":"31cfa84c26df02e5122edd254408c8cc975cebb598eda077bdd99b41178dbe06260632b8a4ef7f78c1c436a0d613c8acf587018db14375e50f3a79cbcb23306a","ssdeep":"","tlshash":"f4b012ee4148040a16730f16083b31b0f0140d070071ce01b244a8cb0d750c129a2c60","first_seen":"2026-07-08T11:55:56.236631Z","last_seen":"2026-07-08T11:55:56.236631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/wheel-of-luck.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:44.176Z","timestamp":1783511744176,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/wheel-of-luck.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/columbus-deluxe.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.263Z","timestamp":1783511722263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/columbus-deluxe.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/columbus-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go22ja3qknxh\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVwOQ3cx6eBKlZnlKtnIrjrxatCz8n%2B5jI%2F4IBKTIqQB9Q7lBOjg5CM0KIh1J%2FDKM5GN%2FCueSr0NxubvC3TSQqZFEe%2BCic%2BgfTuQYFnN88wgBZ%2BlUeJWaH3RxKTBtXYqGrB7UA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c6fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31013,"size_decoded":32041,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"bd851bfd1e9c4f52e7eaa7d70d3fc8da","sha1":"757cd65123a3f23f42cdf6676d7966871e2f7429","sha256":"32241d6867f3acc77f02c9e2a079b365fc81edba31e046c1ece625c55f0a12d5","sha512":"aa80717319a1535bdf4ab459415ab858dc095542fa621c5d11cce79fbc9deab61f4e721974a365bb495980606a36222f313b35e1c914357c93c0189153e597ce","ssdeep":"768:1p/vM4VYA5p0gH0W9tr+BURbWSCrs6mUhz64QmqUyHojw9/L:f/vMAYALpUEC2UtdFOojwNL","tlshash":"ced2e143030c4e905f2f1df604f9421ab7b9ca5283e69d28d411dbaa27e7b8d5964435","first_seen":"2026-02-01T01:43:13.95653Z","last_seen":"2026-07-08T11:55:56.237481Z","times_seen":2,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-0.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.295Z","timestamp":1783511722295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vtte9w1bg-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiVCYWFaRb5HBEjAUEKTR7MTQrTW7q1WjJ2CH7smR3GJZ2sfoHAyOAs5%2BRyux2jHFuHzqunpvQbclJ7w1ArUsVTBqhz6lA5m7%2F8dCE%2BImjrUAg%2F2DmlfDDUhLXiuEaHeXLBovw%3D%3D\"}]}\r\ncf-ray: a17ee6485ca0dfec-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1708,"size_decoded":1744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-17T09:16:40.250914Z","times_seen":60,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/dmca.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.321Z","timestamp":1783511722321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu6v2-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OphxerJTtkQLssYDtvBFsr3EIwWv%2BNh2BBdF%2BjRxa5aW%2B4BCNBRLb%2FdrT0qxUdrvjw7g2O67P9F7QoOVOnxEJuTgxh47hTi1zT%2BdVEyi9BLCHxXwAnUn2%2BPQtN%2FGLYDx5qP32w%3D%3D\"}]}\r\ncf-ray: a17ee6488cc4dfec-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8894,"size_decoded":4580,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-17T09:16:40.359462Z","times_seen":68,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-7.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.302Z","timestamp":1783511722302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj11f9-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCW%2B9T8xL6oljArK%2F3rmOxhGD44sHWlNzHZDxqBtxJDz%2Bkxwlpahp8D6S%2BSPlqameR4NxqR%2BZ5m7c9tWnzumouqZy9zMgS8B2tKaWV%2FHfxa9lLyCJUy908nZlkAXaqwcr8zucg%3D%3D\"}]}\r\ncf-ray: a17ee6486ca8dfec-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1845,"size_decoded":1900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-17T09:16:40.20274Z","times_seen":60,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/games/table-icon-8.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.303Z","timestamp":1783511722303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3w0ylj116h-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49hwe1lXSDGLgl%2BPw3UVulgoEcnFl77u3HGAGUUzoihYnDBR1M%2B%2BJwbI8mJJBecF7f8l82PXVSl7nq68gEcP1eHeweWyJFKriWzYkeq%2F7FrgBegjSle6unRVOdimvWQO0ypoVQ%3D%3D\"}]}\r\ncf-ray: a17ee6486ca9dfec-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1529,"size_decoded":1713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-17T09:16:40.253628Z","times_seen":60,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/apple-touch-icon.png","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:23.851Z","timestamp":1783511723851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:55:24 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Txkfb9SuB8sHiDB%2FuYJ3cNrIM2fjYNVo3oW1kcjztZ9LnYWjpsY5rUFillhT5T1ZWwgbr1f34xTnV2SwPy0m2RO6uFja5lujzCnK5ljhYRTQnQeEbEcyCpfyl%2B6oClgvGvuj6g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a17ee6521e1bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28896,"size_decoded":29897,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-17T09:16:40.357957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:25.760Z","timestamp":1783511725760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:26 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:26 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sat, 08 Aug 2026 11:55:26 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFkM1wI9t758kCp2DinXQ1UEOqasolPmrYiyTa7fcyk0k64BwxS2co3esMlOBubeuSvi3VDNQ0jhPi1NxprXJ%2FuFqzLqOs8dI1cOwiuY2d6YW%2BwyuyAxO6M3JExe0shO0pltTQ%3D%3D\"}]}\r\ncf-ray: a17ee65e0f7fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":78,"size_decoded":1133,"mime_type":"application/json","magic":"JSON text data","md5":"489fcc743b228d6b33dbdf29fdae86ac","sha1":"5df85e9998064308517554d78f855f74d9318570","sha256":"dc6886e669728943ac2c353f17231eb1e9324aa885a5987190e6fe39ae9a5a3d","sha512":"9999c0eff99f8ec6fde8f4f5d154815204d35ed0c5b8afcde0d5da8d61b5737f111e4a104f9b94b8e79f3d3580ab957751e1aa274904a2c5367d9ce57d05c57a","ssdeep":"","tlshash":"98a022ca8080bb3bc3b303200a8b33c020208f2b8af00c003f80bcb08a282028003f80","first_seen":"2026-07-08T11:55:56.242363Z","last_seen":"2026-07-08T11:55:56.242363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/castle-mania.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:30.103Z","timestamp":1783511730103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/castle-mania.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/castle-mania.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:30 GMT\r\netag: \"dh3go22c4whfnk2\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2o5ChHvY1dCRT3S8Rl2XX06%2FWU8%2BjJEv4keIYo15JPMOjBcyX25dYXYNDt6ZfWhfK5UULAzAmoOd0dhvl6s17PzQMTwfeLK%2F1SpDedPczqBmeI7PU1PfzWAIdTbz2CNjmUs2g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6792a2cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30530,"size_decoded":31547,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ab97183d37cd7c33998a78fc68620a04","sha1":"6d7a7989f4354db896f038944aa1ce924fb8d8b0","sha256":"138fd85803d043194f201ff192487966121b053e53085a15175a5e2c3312b2ec","sha512":"5191ba91eef79f01dfac76028b21d17d6356fdb509141b451cfe922a97cb52d231aea189df14ea5f3017b0e05d1f2a3ad7f0d827a8e7b5f68fe006304983a282","ssdeep":"768:XRXCzKlLeJcAdW+owQHToCo0rQxEUAUWyfox:BCzKl9A2wMo0QI9UE","tlshash":"a5d2f13b7780c237e61fca309ac01f824729ddb41f95249e26778d1a72af786096dd2c","first_seen":"2025-10-09T01:23:42.818042Z","last_seen":"2026-07-08T11:55:56.24332Z","times_seen":3,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":425,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/svg/gambling-therapy.svg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.318Z","timestamp":1783511722318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go3vrfnuu8qi-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AG8xGD%2FcR%2FuSk6oNN3gKPkQrMRA22ywzvmyxcfEy9bTlI2D5edh6SCT%2BLLSTwukk2o20qX0EHXdNXN6ub8DPvBfBUr0%2BUnynelVGVmSrct18LYtOuwpQsWhbLff1dK5vyfNxMA%3D%3D\"}]}\r\ncf-ray: a17ee6487cbddfec-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":5672,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-17T09:16:40.337703Z","times_seen":33,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:43.768Z","timestamp":1783511743768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:44 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOLhptECop7zLbA92d8y6ABK9hy%2F7ZPk4QpFuFrg5iTNE%2FvszTYKZgDYW0gbBcvuUjOfLoCG9Mo7cwLkIGeQTk22CHEqp3d6rmxXI53%2FpFhkBZMw9A1ztvbakzzYc%2BuougkaZg%3D%3D\"}]}\r\ncf-ray: a17ee6ce9b4bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":90,"size_decoded":1040,"mime_type":"application/json","magic":"JSON text data","md5":"8cf1deb8a249fcb280e227e9f10a4066","sha1":"c38056c86abb8d25936f7b3e60d300b48c3e8ff3","sha256":"83e7903e7080c9b75e7fdf2ff64b9f1f71d51c656ce3f0f0ca418aad0ef72306","sha512":"4525f690e5cd6413921baa0c1b4eab53b102776c32e998032da3d155102074b5570dee23d16b31a08f4d4c35e8550d8b1a86b55c8245e53766383dd91cdcd680","ssdeep":"","tlshash":"ccb012b74425041f01332548244b79c46164090340d724305f504d424c6220aa023d1c","first_seen":"2026-07-08T11:55:56.245567Z","last_seen":"2026-07-08T11:55:56.245567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.248Z","timestamp":1783511722248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 11:55:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SVKYiMBiVbdyoWC%2BXZSQAMzNAfnG45p%2BvkH%2BJwCngF6qdnOjfX4ZzMYlMiyIO5flEGGXxqnk9lTbpgmeK0IMA4F6ALcxvES6ZxQ2kYeO%2BqkNOIMpVKnx6HhsOLXT8dMWA86Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\nserver: cloudflare\r\ncf-ray: a17ee6480c60dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T01:40:47.434609Z","times_seen":399059,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/fantastic-four.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.266Z","timestamp":1783511722266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/fantastic-four.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/fantastic-four.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go23ldufckom\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JUvYlJVpZ3H84wVT2pN3%2B9zzGgDXgZ8ge2gbPl4DbywQjAIP9SkVojQ1xRm5SJMsO9ON4f%2BsoH%2BJNmHNruqGVX7Kfrf25uVUSTma1s4LUxrhgdoLNlvBmdj3EGD87SaVWz5HA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6482c73dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26806,"size_decoded":27825,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"812e9d40621d079f26cd8d0344f9c43c","sha1":"862fb890826d142d69bfcb68df0b0eba9903818c","sha256":"8848980bd9690b2acd14910370faaf355001f2c711cfdc5aa49cd1f136649cc4","sha512":"154bdd909b0fc9a9e9e0f9cac72a0bb9cf7bd10c41417fb7db38491bc5af3d4dabb6d9fb24069508d953730387070744ebcb4e743d415d6cf4916a8c4c85e0d2","ssdeep":"768:8uR4hUECQhf8Tulww7duVsz2SIixw05xIKoMZm0:fR4Tp8uBR2sgixwe6F0","tlshash":"14c2e1e257632950feecdb64c5bf479093880b8df3265a2043ad6f4f13a3ad464a81f5","first_seen":"2025-10-08T14:20:42.75195Z","last_seen":"2026-07-08T11:55:56.246959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/avatars/scaryninja.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.290Z","timestamp":1783511722290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/avatars/scaryninja.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/avatars/scaryninja.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go20hgcs44d2\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSvs0VCO6u%2FFDDGVbPCNT0MLxYCCUddxMq7TKEZzSq2B8nIhJWPHkclrint48LRfe8FNOpk%2BoIPr6jWce%2B26aZ3RfbDuXbl8TKfO%2FNHVxAnL3zTI%2BvHx48xl%2F9%2BOAlizYwq23w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6485c9adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5654,"size_decoded":6679,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"633a6ac90d0636cd5de4cad6562d070c","sha1":"d3e5f428bddae9c756c817e7a69484f4042cdf9c","sha256":"af0d211973cbe8a52b0b6fb233b3ebb08e4c802a229bd6a4dce1d7b930c97028","sha512":"1f7bbf91e557edd4bc9781c75160322fa12ea3dda787d20aac17ff6db6557d29ed4facca296226618defcbe1453889adea7bd64bf5fb11f0d16929f36de01a20","ssdeep":"96:tku4dLX67asdp8WXvR46SpfULmcCe/FQeSyjZZNYtqvmlzt6rZQt7SMoXVqgJz2g:WueLqusdPXpFStImcZ5RcKmW+wXVJJE+","tlshash":"29c19d5237a4bb57d67d8238895db30ae86ccb195842430fc45cba4a83ab8edbc38021","first_seen":"2026-07-08T11:55:56.248156Z","last_seen":"2026-07-08T11:55:56.248156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/ajax/game/","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:34.768Z","timestamp":1783511734768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 133\r\nOrigin: https://rainbet-hu.eu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-hu.eu.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":133,"data":"{\"exclude\":[\"264\",\"1970\",\"1749\",\"1473\",\"1877\",\"1667\",\"1859\",\"2509\",\"700\",\"2047\",\"104\",\"741\",\"176\",\"2241\",\"1787\",\"976\",\"1767\",\"1336\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Wed, 08 Jul 2026 11:55:35 GMT\r\nexpires: Wed, 08 Jul 2026 11:55:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.31\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FyA%2BnRJuOJEDgPpGdSiozS3tDgnxy3YKTXlmQLIdOZGyHPt2LzvKediNH3K%2FREl6szsbgF%2Bqj1c%2Fcy9lDTMlqiLonZ9AhPzdqXm4eizAGMCweFxVSjkhj5pscbGGCfnZz%2BvdQ%3D%3D\"}]}\r\ncf-ray: a17ee6964cf3dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":86,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"0a5d02ed9286317d2c49b0ea29261a7b","sha1":"67e30bfda0ac4154089c1020aa6c9a50e99e9016","sha256":"af6d5c7aa0c2fec0faf7021c2b7c8470747ec557092d56f2504b659757d14bbe","sha512":"dde5f287cf1e02668652b9bbf4b9fcdb191a77cfb880bd004b8a21ba1bb2268ed4ef8d5cac3fe277b3627fa1becf16cf25e5ff8228d5f75ab4cd917cb237655e","ssdeep":"","tlshash":"83a012ce4442040575336805ec5b318470310b4301614c0362c89ac004110050213c00","first_seen":"2025-11-25T22:34:39.266015Z","last_seen":"2026-07-08T11:55:56.249139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-hu.eu.com/uploads/media/games/kronos.jpg","fqdn":"rainbet-hu.eu.com","domain":"rainbet-hu.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.171.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-hu.eu.com/","date":"2026-07-08T11:55:22.277Z","timestamp":1783511722277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-hu.eu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 17:55:53 GMT","end":"Mon, 05 Oct 2026 17:55:52 GMT"},"fingerprint":{"sha1":"5A:35:B2:68:FB:E8:55:D5:F0:35:96:9A:62:A5:BF:FC:38:EC:F9:1F","sha256":"DC:3D:56:60:9C:B5:EB:C0:CB:60:AE:8B:A1:5B:1C:09:A3:A5:58:15:99:3D:E3:C6:BC:A8:23:BE:C3:9C:79:63"}}},"request":{"raw":"GET /uploads/media/games/kronos.jpg HTTP/1.1\r\nHost: rainbet-hu.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-hu.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-hu.eu.com-/uploads/media/games/kronos.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Wed, 08 Jul 2026 11:55:22 GMT\r\netag: \"dh3go25ucsmwnp0\"\r\nlast-modified: Sun, 15 Mar 2026 15:29:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCzgXeP6PZcLKYfO0YnlCJ5OXwxSICLNXexLCNvXHmL17GCCLWqxtZlsODdh%2Fojls37X7y%2FudEx9RiVBvF3KesjescVfhXcx%2FuwKywXarvVVTaXlbuiQ2oLvAq0iDnmlyWKK5A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee6483c83dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30708,"size_decoded":31719,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f6bfffe3850f6909c6b814ddd648ad5e","sha1":"78626343d7d7d74b8bac3ba45a483b6c51f8e6e5","sha256":"15e98baa0b25896f434baaeeb4e3d5c2f8a73d3a1085e1908d0e45c2edbe2dac","sha512":"0d055ade26460ad93ee82085b606569bea69d3acac0a3f0180755f8f21fc3cd5f41cbf2eccd2ee9bd12aec445df5bae3a317a7365a482a3b86c5792ab3e8f71d","ssdeep":"768:pwyQmva4uj0/6U7Y9zc44whiATNlJvAgx9K17+l8Q:pmY6JAwhvTN7vAgSclh","tlshash":"fed2e09d7754878de03f536a4c52cabee3fc09ca6a85176994f500241fbab9a3c168c3","first_seen":"2026-01-03T05:05:42.482957Z","last_seen":"2026-07-16T11:19:41.937885Z","times_seen":5,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-hu.eu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}