{"report_id":"996494d4-9440-407a-ab47-55c03458d9f9","version":0,"status":"done","tags":[],"date":"2026-10-09T17:16:01Z","url":{"schema":"http","addr":"rainbet-francais.com/","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"104.21.10.231","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-francais.com/","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"title":"Rainbet est-il légal en France ? Le point juridique","dom":{"size":103939,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9955)","md5":"74fbeea9eea66ee16adb2886740727df","sha1":"3fdb5462c4e64dc7214bb6359fa39d3f4fe667fc","sha256":"9cd14bcb915904ad36ad2aff98c2dacdc009573305de5a876052d1c748fd3c9b","sha512":"7748835329d6b4fbb4aac5512f61b69a39fd93d0d9cfc7b3214c9cd1d38b5e58feb43f54572790a4bd542aea116dd1db64f60b0fd61b8517534ec093daba1514","ssdeep":"1536:A6II223dOQJwB9vU3e9cdY504X3wId/oay:A2Sv4e9GZ","tlshash":"89a3e895b3b442bd9083a7ef6b1262363959f1dbe4054510f3fd0e942f82e9ddc1b88a","dom_hash":"domhash1ebe00989b8570de8b8e1daf520e0eed","first_seen":"2026-10-09T16:56:16.267522Z","last_seen":"2026-10-09T17:16:03.616653Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-francais.com/","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"104.21.10.231","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:16:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-francais.com","ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-10-09T16:56:12.495235Z","last_seen":"2026-10-09T16:56:12.495235Z","alert_count":22,"request_count":22,"received_data":522916,"sent_data":11512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-francais.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-10T02:15:15.074697Z","times_seen":449908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/assets/script.js","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7efc3b5541a2f2f45209502a517a9ce3","sha1":"fe02b6b4db049f43553a6e8b315e1d8d1dc43344","sha256":"b783b1c66ac8afc5329d5a566e6c9efd2e0058cc3110fcf0a7c6ceda902f9952","sha512":"6c1385a045a7643ac688bccae1fa8fe5049be769bfa0d3bb235b25eb138c5c5075cb7027522edd3fa1ba7d8169700450cac7c7e74a2a19c13e0102f0757b078b","ssdeep":"192:KCCMq+qcYjSi1s2a9l7PucVMOw+4rhlptZonbL5qXlVmZeUQHnCr:KC5qLsddGBZtlABq+Zz","tlshash":"28220f2eb9a23176947b32bd879f96493a6550031906cd003eecc6846fd0a3517adeed","size":9941,"data":"","first_seen":"2026-10-09T16:56:16.305433Z","last_seen":"2026-10-09T17:16:03.632543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/mongol-treasures.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.402Z","timestamp":1791566131402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/mongol-treasures.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"24bc-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BQ%2Fm4R37UOTHm8l4Ty6C%2BPSVfVLRHbF1cTj8LCMn77xbkp7%2BLtoRFNYBZ%2Fyq7sUou6aSNq8Wumg75aAukTv8lGuqb9D4bCXdcEdlP%2FcO7pqm6UJEyLmXRd22Xp1u8Ncl7PBBaW66A%3D%3D\"}]}\r\ncf-ray: a47f07213a6da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9404,"size_decoded":10285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8b8aa447d53b23b2008f819abb11d5","sha1":"fce8973e1ac1204f96821cde9301deaba5e83fde","sha256":"4c4e9f86d7299a28a353958eadbccf066cd2240277e20a36e305232612866525","sha512":"9d71fe33b30cf7cdb4028699ab8aefaf4d579fcc7fc9da06afb3766b7d5ad2e5250492149d610575604c8f5bb8ea080403b7a4b9fa21eb609dd167c99e543843","ssdeep":"192:o1DqLxcCoy/4g/VjxGHBXCLu/Fvh12scUHnTbUxdH473TWfyaR3:oImZyTtxGHBX/nxKH47Tqyal","tlshash":"8d12ae16d18f0e5428aa084694d3fea4bf5b905a3b56e2c88278d85acb87b8ec591d43","first_seen":"2026-10-09T16:56:16.27325Z","last_seen":"2026-10-09T17:16:03.620004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:15:30.763Z","timestamp":1791566130763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGROX%2BJqNetQviMem1sL4ryOk6xhBoY6VRopfE6QyzkwRWHaqoTUksy8NVekE30baasiJSAQRs0a9vHHXD2H%2FbBtYsxMnZ0%2Be9h8EAJ38n8EHtZvHe5jedcwy8pT4HZVa3MZ4UIHDA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f071d69a4a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103540,"size_decoded":32540,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9955)","md5":"7557db8656da566f406171c1cd820812","sha1":"9003f97db2d2188dd7ea7010593620cb85464769","sha256":"45ff49622d4603e31804b98464366125c60227c8dd0b520afcef90fa3553f0fd","sha512":"24a0d2e694e6c30d8ef9cfdd9ddec5f007169e8ca762291ff1d092037ce9ce78e42a4d23bb69ca5334001be3c9e551517c06ea25a20eb6200e85c87b2156659e","ssdeep":"1536:boIIIJc+vGJwB9vU3cYcMYH04FwrId/vwR:bOSv4cY3L","tlshash":"6ea3f895b3b841b99083a7ef6b126236795af19be4054510f3fd0f443f82e9ddc1b88a","first_seen":"2026-10-09T17:16:03.622032Z","last_seen":"2026-10-09T17:16:03.622032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/gates-of-olympus.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.328Z","timestamp":1791566131328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/gates-of-olympus.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"4cf8-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYaMx1p6CdyeSP7MKN%2Br5%2FlNhuIB48PSn7bwXgPLyJeYSTyYwoNpd85jMM%2FDCgPOBpmRwXF57RM1cYRZyHuNAnp6Iut885BE9kxKTM9dGGLIeMnNDPu%2FHdNYfGE%2BQLHe3VMAheplzw%3D%3D\"}]}\r\ncf-ray: a47f0720ca4da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19704,"size_decoded":20584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 322x322, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b652d7f9c92590c6060b005c1c0bc2e","sha1":"19a2a9bd3e73538194aa655a3771c32d5d8647f7","sha256":"7399c94294bb58ed31f895d1101c0da6208f78ca540a7fd2ef92f48776f555bb","sha512":"7ae8d94a4cf0d202247086b9d4294b834bfde6ea34d50a375bd0d71f6661f4855d24b24165df6559d9b0684f4f209b0491b67861d89b19bd11ebae4e4c40a2b3","ssdeep":"384:qkyUWehTScBTuX0oz5s4RmQPvUbXcYahm1S5m35Bq7:q/K7ByH5s4DMrcYa413g","tlshash":"4992e0b60561ad0a0d8e8d0b3b99d5fb2edb3a9550ba4d80e11041f41ef418b0fbfe2c","first_seen":"2026-02-17T10:57:37.951688Z","last_seen":"2026-10-09T17:16:03.624225Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/big-bass-bonanza.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.331Z","timestamp":1791566131331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/big-bass-bonanza.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"1ffc-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvxY2%2BAD4XAswm3M5%2BhH4Y5mInZ1k3W8XqhqHJ4sMFykaa0wYvLbCfb3Qd%2B1o0PKLVV7Z7fSot4O24o2nxz%2FrykA5aemGoghLHcVcEx3CsqcnFdeLF3HSDvYL%2FbkAPAEiuXQPPxPWQ%3D%3D\"}]}\r\ncf-ray: a47f0720ca4ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8188,"size_decoded":9067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54e27494f115bc083dd1489b4153b606","sha1":"8c1cc4f6e5709f2c38dd8e4e37a478b3ddc51534","sha256":"99a0fbe4167bd19e97cad3a35cbd7587afa6382513205e40d654ec9de4da7701","sha512":"7b90a347d76c737f8b7f795e093c249f3a812fec75e3b0d869406e7e4820afd5dbdfa1ad59bd8665ee923e87fd7343ea5c3891e79161d8af54301afcdce2a7ab","ssdeep":"192:I/61emyeqJllk4YvRvFSelnLlRfpxV0/BuPOsGcwMGw91BKOkOl9FGGtIRjpT3:IiemyeMlq7vbSeNPhPOsrgBlFd3","tlshash":"28f1af3f9013a6f7a55e8b00503e140b57c240692716e9eda8f33abf50868cfb27857b","first_seen":"2026-08-11T11:06:09.688828Z","last_seen":"2026-10-09T17:16:03.625276Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/fruit-cocktail-2.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.405Z","timestamp":1791566131405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/fruit-cocktail-2.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"3544-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eA6EJM6wSMfAJjnK9Ay2RwTTqBzC5F8BkoXhMLsc3J6jkGfueUg2nHVy8utXnhbUNOlFywcMTqc%2FibR9DOchWCmfH5ci34Rc0sKrp7TDufzamMC2OcW%2FiXCSTQCCbPuvIXY%2FcvFRQ%3D%3D\"}]}\r\ncf-ray: a47f07214a71a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13636,"size_decoded":14512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5aeca1c99a67b1069d60d5abc9bf2491","sha1":"1ada6d15f1366b759d222d8131067470b88e78b1","sha256":"d478b9607a315d9a760a3faddc898d3c1e243fc3cd30a3d97a16436f391ef7f3","sha512":"80fff41542e61a6f376096fc4cad29a19e11bfe2ca33bf78d8611c0268e5774e7019f077d33e576ea8ab751fe95a1d3aefa1915ead093ba6c74b2f9085adad3b","ssdeep":"384:O22hh7pS5VfEqIHVhfduUeD3fukCOXQ+wBzEBryWCz/Pnmz3:+husqIHzfduUe7u+6z8yW0mz3","tlshash":"9b52c0eb27741ada78ffd7a8063df9d98b4d8a244ebf8c5ec511c7012560e944acd144","first_seen":"2026-10-09T16:56:16.275591Z","last_seen":"2026-10-09T17:16:03.6262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/assets/style.css","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.138Z","timestamp":1791566131138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /assets/style.css HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 13 Oct 2026 12:12:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\nage: 1193\r\naccept-ranges: bytes\r\nlast-modified: Fri, 09 Oct 2026 16:55:37 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGNOBrim%2Fpp7e2CCtzGH%2Bh%2FihYw3rCCGu40fuoQYyVGFRi%2FeDyKwLuPWQ6eH7E%2Bu%2B6o%2BOJoXtnnbcOK8Ku4PvSmd6YpXGx3zSlY3ZK8YMxteqqhKuI365nR04CWQ35PXCK187J1www%3D%3D\"}]}\r\ncf-ray: a47f071f9a0ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13723\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80890,"size_decoded":14691,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b52324fe6a7802201e3f2a3a02969b4e","sha1":"67f3944279ee1311c72e19449e3e42e6b14ff745","sha256":"86adc66ca7a865dfd3db908c2138f71c26f8b72137931109e94b155f53f43834","sha512":"9c066487fd09b7decf1c22d5533f86447b03e1d58d952e25870b6f53bb7d532454787bce29a18a02d283b3aea77803f98d6c49c906bbbf36c11741eff1e28bd4","ssdeep":"1536:VDgZNh8Jt5/5eTTvHSgL36b6ZEhBbUgPQTTiXvfDDbb5Ii:BgZvstsTvMFJ","tlshash":"30835125e315112464f77fec25d6576ca3acf0028d0aac78bafd1028abc63ec559f798","first_seen":"2026-10-09T16:56:16.302836Z","last_seen":"2026-10-09T17:16:03.628481Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/hero.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.139Z","timestamp":1791566131139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/hero.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"156f2-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHvCt65V9eIE4fjZe0oiyESvJv8C2GJnVL4%2BPlPbdoFatWnZUL1ToJK5wfZUTd51exnnxuug6vwGEJURl3V1JpNzeehUvRTbu7iwZIUkCCLL5bGz9s4l5BFrPhf1a8NQ7IdrKWwhSg%3D%3D\"}]}\r\ncf-ray: a47f071f9a0ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87794\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87794,"size_decoded":88667,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ff42b68d2631a2f3bcb8ede23f699ac","sha1":"b0ad27c9059d545628a150d6eb5538193e244fb7","sha256":"5b2b9cd2ec9857549500f4d277be3be516e6f906c53c7802df80a73185e15adf","sha512":"efb09e4a6e01a48afb2a958382881de611b91d66cf8ecb2af7e9a2c50dfbed18c9afd14cd1c4666e3171eb2df68af9cdb7ee56e594ae81f9bfcd46a20e4aee00","ssdeep":"1536:bOgbnJUJXb1bWbhRdUjmHDgsus/LI5b0KjO2VQj0JhgkEnBOIAi9kgyavb:KgtUJJboRGW5us/LIxg0nynLX","tlshash":"5183013493d47c62fa2b44bc6fae38e4727c08787914dd12de4c71aa63a2464eb5c7c6","first_seen":"2026-10-09T16:56:16.303954Z","last_seen":"2026-10-09T17:16:03.630245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.141Z","timestamp":1791566131141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 11 Oct 2026 17:15:31 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBzopEmzLfte3udHvYA9amNWpNcjWzpDLFs30OdFLFB4kA84Md5ZJ%2FMitpFBR4noT3bPEezLEc7wqkMkCb9Mxp5K8wXT%2BFRsF%2FPzmI6rc8NG7L4xtLntB3MRcTaYHpCUuytNPUkeyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\nserver: cloudflare\r\ncf-ray: a47f071f9a12a41f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-10T02:15:15.074697Z","times_seen":449908,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/assets/script.js","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.142Z","timestamp":1791566131142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /assets/script.js HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 13 Oct 2026 19:03:46 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\nage: 1193\r\naccept-ranges: bytes\r\nlast-modified: Fri, 09 Oct 2026 16:55:37 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgq2D4aUGlIxOIh2BvnmOS77PKtmz2b7TKmuyCgJcxI2gCH7%2FPvppBwFdzzxLyuK5LtfGFZoj0gajYUtDzncs6nFdfobaSCHKvTAmQlGmNLc%2BH2yVRr%2BGwWxDtM%2BY47kba6j3rUPRA%3D%3D\"}]}\r\ncf-ray: a47f071f9a13a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9941,"size_decoded":3697,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7efc3b5541a2f2f45209502a517a9ce3","sha1":"fe02b6b4db049f43553a6e8b315e1d8d1dc43344","sha256":"b783b1c66ac8afc5329d5a566e6c9efd2e0058cc3110fcf0a7c6ceda902f9952","sha512":"6c1385a045a7643ac688bccae1fa8fe5049be769bfa0d3bb235b25eb138c5c5075cb7027522edd3fa1ba7d8169700450cac7c7e74a2a19c13e0102f0757b078b","ssdeep":"192:KCCMq+qcYjSi1s2a9l7PucVMOw+4rhlptZonbL5qXlVmZeUQHnCr:KC5qLsddGBZtlABq+Zz","tlshash":"28220f2eb9a23176947b32bd879f96493a6550031906cd003eecc6846fd0a3517adeed","first_seen":"2026-10-09T16:56:16.305433Z","last_seen":"2026-10-09T17:16:03.632543Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/logo.png?v=77a57f749b","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.150Z","timestamp":1791566131150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/logo.png?v=77a57f749b HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"19c9-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edjdaztF%2BbpL8CIMqA4E0YlGjxFJvyegZvNV17u5BriQl8jOHlwTieLYFaA9akODLNU%2FtjuNy4Jslc27Qws8ucaLVl7cPC94sfS8B19u87LV1QfzUetCle5ph97hdL58Jf8XB9xBOQ%3D%3D\"}]}\r\ncf-ray: a47f071faa18a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6601,"size_decoded":7473,"mime_type":"image/png","magic":"PNG image data, 210 x 75, 8-bit colormap, non-interlaced","md5":"b7438e5746859d33c3969723f388c2d4","sha1":"0090ef9a84852974a50ba25cd423b1200fc51286","sha256":"fb19a23f5710a79131d730d65e6f623170904dea1a0bc8afb53dc52f9627abaf","sha512":"945fc5a0743311e929287f2513393b5367f86ae75592829cddb6a40fd728b8cd4072fd074103b88f242ec5ae5f7c67523f007b9637618c4a87deb2f25593f08b","ssdeep":"192:XOcgAbj1JRv8d5LVOCEQpvrxInr/s2y28ZKqR5:ecjaLVVEqxInr/sbZl5","tlshash":"ebd18e415aef4950c07fd872c9085b91f32f8da6654aaf00890cdab9b733b6fbd1700a","first_seen":"2026-10-09T16:56:16.306789Z","last_seen":"2026-10-09T17:16:03.633806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/patterns/diamond.svg","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.187Z","timestamp":1791566131187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/patterns/diamond.svg HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/assets/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\netag: W/\"a8-65885b5aa5e80\"\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85%2FId%2FAMZjazCnYoD8gAQlJ7jdftiyfRz%2F2DhNwUSoCpN8f%2FYNKG4i%2FI4UqIhXbD3B1wZRQEINss3ag7UJuKjSV%2FIcNWI8mZtQ4fZzt8FYPKRkGr1AS78w8rvLtMAwqDGCfAfvvl0A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f071fea26a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":1012,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ea68339732af5049d81d0e4f7f43b05","sha1":"c8efd3523983c895cad4c04cb6fd625247c738a2","sha256":"a550274eedee964c309f84d00a26227bbf837a4592e2665266768477d1f80f37","sha512":"71ff9678dd0f320f6c061fb92604132f1f2abce554166b690218b3615b1d5705e2dd8a27edd848b25a46748df0e122f2950b69f8aca78c46319e64b373269349","ssdeep":"","tlshash":"8dc08019514d4d19951086149778605811bb5056524c00b5d8443433e0075c76d771ed","first_seen":"2026-10-09T16:56:16.310004Z","last_seen":"2026-10-09T17:16:03.635025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/swoll.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.334Z","timestamp":1791566131334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/swoll.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"26fc-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raoiUw%2F0wnm%2BEBJn11CchyqJ%2FlvCgFHqzAZBl5orVkNJkafiMJr%2BKJ4T5DXq1fdWbwbCELy6469V58ejNKnpwWQGJTVDMK1ftcCMG2P0z%2BZVFP3fth6jnF6UIU1XDR5GvaLLeNETLA%3D%3D\"}]}\r\ncf-ray: a47f0720ca50a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9980,"size_decoded":10859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"09b544737a064544cd61a9fcacaae757","sha1":"ffd3e42299f56edd31e3b64199cb91199aaa0600","sha256":"72d02118d3d25832884c95503efb849d902af476bbaeefd32dc933c0f4cae03a","sha512":"63370618302cc020fde7867700fb77be096161ea5e694b24b9d2feb75362b876eee9133af7647d1ddd99bb37e4cc7c610c3bb270d052cdd40d412650c84b927d","ssdeep":"192:A0JjFv/ZxD2JX48p6MKUG9chxUxiZDBDZaj2kSqeofh:A0HBxu488zUG9EuiXZaqkSGh","tlshash":"4022af07c63d2fdb89678bfeb65f2db0e58994a000d31dc53c94ae316d54a3a47427ca","first_seen":"2026-10-09T16:56:16.291545Z","last_seen":"2026-10-09T18:07:10.632978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/tavern-lucky-barrel.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.392Z","timestamp":1791566131392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/tavern-lucky-barrel.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"29c8-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jaV7p03V%2B%2Bt556OksiMoHKottbzWBw5%2FDWSOpo%2BRQ%2FTd%2Fg4Flxb8aOTjCXoWXukEHqp1BiHcN7bqqJC2z9kuYQcW17LvI%2FX%2F%2Blf2B1V20iM72tuNmnxIwELcfVvjynWywWlDJOuFRA%3D%3D\"}]}\r\ncf-ray: a47f07213a6ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10696,"size_decoded":11584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7bad622bb942cbe152a7f5bfc77fa3d","sha1":"88d99507356ea2975adf48ae7077d3c61101ec47","sha256":"18056ef837029c9277f1268a61133d9e4eccc9fb79e45e1ef9691957b8ff4542","sha512":"7ea4b2d75fb0629d6ee792ab8d4968b8e01e21b16cba09ed40404291151e36bed9efde439aa854ba6877f2abf42b4db835ea7cf53ecef457d28d972a6de4a0e1","ssdeep":"192:Y3Pwpw7auMHEJZFDmS4r9qpi+xKxXRW3YTL6YrpQr6H38neKq:Y30pH3spi+GKYCaG6HMeB","tlshash":"4d22bf4a58f6997b43d390ce95ce4a494c22ccc5ec07a7be5412e5b3e9f06bf0e0929c","first_seen":"2026-10-09T16:56:16.285766Z","last_seen":"2026-10-09T17:16:03.637766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/starlight-princess-1000.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.351Z","timestamp":1791566131351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/starlight-princess-1000.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"39fe-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uf7u%2BoWa7qpsxGNflK7ZsIjBfYgARCqtNN%2BavHaL3%2BDcl%2BhghqUY1tJzGEnuVhmSv4ZDAdG9IPucN5jn%2BfoUnJPg1g%2BNKbqcOjR5p4mCHjCsKpTZeAij3ZEABuavMz%2FxMjNpwJP8Cw%3D%3D\"}]}\r\ncf-ray: a47f07211a5da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14846,"size_decoded":15730,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8be14f47e6dcf414e4f55fcb135681d","sha1":"c9ae9be746a5a6935dbc6226122ae6b7d1fe6fc1","sha256":"64da5e5f957e3b0c0d006ddee3c2dd14f090e0f5b0dda648a569f6eea72d372b","sha512":"66dca4336f3247d11dddf23f4090819304e37d3aec7b0862d3d5e96ab00e7e7846203b6d8db1ef1873382e8a19561c776c7d31d7542c61649e09245e046c02d1","ssdeep":"384:Cz5n80N7q3hXT81ViSeiL4RxzmtoD0QNbQsfF:u5n8N81VLeHxaMbHt","tlshash":"9d62d162d500cda335dc68118dc9c77b016e1206b9836e86ff33826176fb7262159ff2","first_seen":"2026-10-09T16:56:16.321432Z","last_seen":"2026-10-09T17:16:03.639766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/main1.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.407Z","timestamp":1791566131407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/main1.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"da5e-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ykDx%2FvfdIg%2BV2%2F3SIhSQGRYsJYn7NExmkmMn7plbW5HKgodEz%2BJKo7OlTP8R%2BJUoSN6HkrvQvJgqDihCXaL7hNQ9P57Ue1yFJmk4nmauDmMH9vzVY%2FpKdrZJBncZ6wTil6Imh55Zw%3D%3D\"}]}\r\ncf-ray: a47f07214a72a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55902\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55902,"size_decoded":56784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1837793b49c0794b0c4934bc290e840","sha1":"4fb93bbe35d9f726b1f3010ddc33f70d1c96c398","sha256":"efd1a381aa6e8fa4b9532d9985fb09326308be909e2c9fdd663fbe7d0d9ddeb9","sha512":"00d66416440d783768fb9a8be758c7c8364286b003068ca81d428c36c8455f734fdaadedfb3acafdfcdd4421a13723bb31f3ead1cb552028ea56fc9e6ddaf880","ssdeep":"1536:D3D2y4MgRZ+WyUsU8Mr9nOEqyCPkSUc5QF83nSfI:D3ay4rZ+gd8MROEfhbcc83nMI","tlshash":"5643f1186221e4c9dfb1b666f5955fccfc1909a0f4662ffc768e8a103a34c896533753","first_seen":"2026-10-09T16:56:16.277386Z","last_seen":"2026-10-09T17:16:03.641287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/favicon-192x192.png","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.463Z","timestamp":1791566131463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/favicon-192x192.png HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"2c4c-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QKDfzxGCzpnHGZTgBXH0YHM9SbPq%2Ba%2Bx8j1qTLaeqxgsBENAAEzdnatAyNIS8j16Ka%2Fr0VU2TQlOqAU5lQHlJdKAmr1u%2BQWVvg8B9M47EeqtU2rbR7LwcEKaAc9wJSZXdeROrSLkA%3D%3D\"}]}\r\ncf-ray: a47f07219a88a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11340,"size_decoded":12220,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"87218e7a466918014448a2afcc18b4b4","sha1":"43b44f938d64ca9b6adeebf64fef8be32c5b636c","sha256":"5e5118974535c68aafa175ba22ca0c3eb9dc759489d8b1ef8698f031c651dea7","sha512":"519cdba89edd62b71f62f111dca6012219e2d2df0fb667d2ec697a0bc1127d82677988a08294616d0d219690271e117bf1741bda053f53b664ca3393a024c71f","ssdeep":"192:DYaqVab7mhSuYiYsc3PmaOH64MFqDWqZv+4MmRvTfzT0MWMOtwynb9ix5B/8sLcI:eQknYjsc3OaOa4oqDZRnT0MWMOtwynbG","tlshash":"5c32d02ea53ac001367c13d3bb2a52404673d50852f97fec5991526bf85c7bccb4ec46","first_seen":"2026-10-09T16:56:16.280841Z","last_seen":"2026-10-09T17:16:03.642627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/favicon-16x16.png","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.465Z","timestamp":1791566131465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"272-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzk4c6kRkprr5G76ui%2B8dOrS81mNIDiFxuD9ILgbyeogIqJsQNxKf4gxAeG5nCwbL8EFTrGuJf9qn4JDL89s%2BXatKYaJF0jsb4Uv5ecrvZ%2BKFcw%2B%2BvaEyxdpP5WVcg%2F4U3xZ1%2Bfptg%3D%3D\"}]}\r\ncf-ray: a47f07219a89a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":626,"size_decoded":1509,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"7a01bd75e8635bf1de02210a064e2978","sha1":"82ba1949f42a12cffc50c249339da1d5148a0143","sha256":"293f492a3bfe7cb4b8760f49401881002e34792eaf4df783e42dfc736fde00db","sha512":"ca6b926b41d976a257e902efa191307da32a70ebaf5e980af0772c1629a35770a0b7f7838af4a8787e46edf94696af8f13986542bf376bff8e12eaa979fb8c02","ssdeep":"","tlshash":"8ef0b7c03ed936bdb467527653e901f5a8b17203d430004e2398740e3c06d9270c19db","first_seen":"2026-10-09T16:56:16.293289Z","last_seen":"2026-10-09T17:16:03.64395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/ways-of-the-qilin.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.316Z","timestamp":1791566131316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/ways-of-the-qilin.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"30b8-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQdWjRzX2VSGY8Fnh36lt2Mw9S7Ju2dSXio%2Bu8GF3M4M5Qk6M1JLDIXN16r0X0DlCtvgWAudjLy9l4hfGz3EpntAiU%2Fmn9ykSDV4ohjoxaKo7yyPZAQJeRFq0goFtOv%2BgdUg9Oq%2FoQ%3D%3D\"}]}\r\ncf-ray: a47f0720ba44a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12472,"size_decoded":13350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f59a0863f2f004e2dc00b185ebb57c22","sha1":"9285a24733f0a06185af7140ef8cbfe89f4a1dee","sha256":"fb84306c5186a3b53115ffc194b9af9db3b25d1cde315c8576ce37942c75fef1","sha512":"6d59f33f1dd371ae01ace8dbda18273027e8dc082ab47ad18ca788f34835cf9f79cfacf5ca361ac301296bb12f8454f7db8ab887ea1da722e28175da123415c1","ssdeep":"192:vbEbHSsgLUkxjqVlRK94vvVzkFFtTyvoGh3yoSi27cTTNcmWA/FziOUND4n5mE3p:D+iLUkxmV3n5oK9hCB70NchiD5lgMoA","tlshash":"1b42c0226fb8cddb3ec12855ac02f29e0f28f62b9b4e67143505cadc595275c7d101de","first_seen":"2026-10-09T16:56:16.315443Z","last_seen":"2026-10-09T17:16:03.645469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/book-of-oil.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.319Z","timestamp":1791566131319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/book-of-oil.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"227c-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6ff5p0bxxx0jftdbPczU9ooyI820l8%2FPC%2FHORXxO2nhmCyzN5OTrlwYahLABsfporKPOKc0q%2BMLCBORZwkdOz3ju0%2BcVE%2BIfaJJ7mVhBWebCDqqJM0xczF2r1L%2Bboc4FHJw4UvhsA%3D%3D\"}]}\r\ncf-ray: a47f0720ba45a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8828,"size_decoded":9709,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed56d39fda17a9386f06eac6eaa28f98","sha1":"bafd880c9f9b446926e98c72889f1e70b89a348c","sha256":"e4dfc64b3ad7cc58f20f4fec12869f23886b8e749358e3db3c0acd69c78276b9","sha512":"02c4676a7ba5ee3c44f0fd57d0ab8d33778a7ab36bd7bc288d753493a5e841c52cba0c8961869bf9459f34ecdc1bdb0ce8a894e8f6ee3083a0e79e36ae0f210b","ssdeep":"192:p8wsog4OAjygMZzLKo1b1rIeGg3MZpsEajfLnmYOCLo/:pfXOIvMVB1hlGggIfLmQc","tlshash":"cd02ce916c29fde5249f2aaffa0303900cc63b95be134edbc1329b530d47365912c6a6","first_seen":"2026-10-09T16:56:16.311207Z","last_seen":"2026-10-09T17:16:03.647179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/ultras.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.324Z","timestamp":1791566131324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/ultras.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"3122-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kb%2FEpEi%2Bj0dwZ7RCzNzCzwD2J1zqxnghFh8of6CoYDFuRtBWdDkDbkgiHMWSmOQqI7DKvSyVCSEWLlZJjCPU%2FnwEGGOIyk%2FuCIbEGKM1jBHsN3WkQQ2cfpPfjYl1aIxOWu%2BemxkavQ%3D%3D\"}]}\r\ncf-ray: a47f0720ca49a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12578,"size_decoded":13458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2860bd749d2d7d4895f061e5d7c6edbd","sha1":"8d3fe544006cb19aaf579f297086586bd2007c37","sha256":"389f719f24c551f7b4097777af5595ad98d6822d1851838ca2befde7e369ec35","sha512":"4da4aee33dbbd6bbecfd3a192b150997723db6e5c3efc2371ed41c3ac5b1494d863b77f994afee5fed44fe454d08f50c6f975e8816a38dae8ac0f71901eeb36b","ssdeep":"384:3rD0Sw+sAYQigQpqNsE5pkH8BPi/2iafZ7BfgMY9:3rDJw+sAog8AVGH8BPBN4MY9","tlshash":"7842c0cc93e597bc07a64045b3a5a3fb9053ed08364dbfc32ae0e7ce156601b445ea62","first_seen":"2026-10-09T16:56:16.318506Z","last_seen":"2026-10-09T17:16:03.648499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/big-bass-splash-1000.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.336Z","timestamp":1791566131336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/big-bass-splash-1000.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"38ae-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTdNNor44AHso1KEqKq8SqzmZCbg9OX3TIn8MroJp0zhVSHbQZdOfe3eok1hsnfenXCeXB2LuebKy2ra1e0pWt8JqnHN3n3yq4ldJ42ZEqfxuyBXrAsVOlFq4Ci5ycQNWGW1dW0Blg%3D%3D\"}]}\r\ncf-ray: a47f0720da55a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14510,"size_decoded":15380,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db04119f17a7ed090cc4e991e3ba5081","sha1":"6b21aaa184aec0eb77a3f14dbafdc8e6fe382dac","sha256":"d2822596b46894d2ede506c4d201a7e72bcb31b559bdbd1f64e3aeffe3465a14","sha512":"a8371373b046b1a05f56480c79f2b7353bfd3371c66cc4dc4b4f10febfc20dcab9cdd7368c452384333f95b26e1b5e738d267b18becc4a5ed806ac93c33f6132","ssdeep":"384:SCQSHcvyXjQUVwSy2njf/utWQ4l/b4ZBMczpp5Pg+:WvyXjQ+wPYHHQVVPg+","tlshash":"0d52e03a0e8d0946d0ddcb8bef8183d839b199f1b1a985a7a7004fc30f15b6487e1cb6","first_seen":"2026-08-11T11:06:09.665574Z","last_seen":"2026-10-09T17:16:03.649642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-francais.com/img/games/lucky-streak-3.webp","fqdn":"rainbet-francais.com","domain":"rainbet-francais.com","tld":"com"},"ip":{"addr":"172.67.146.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-francais.com/","date":"2026-10-09T17:15:31.389Z","timestamp":1791566131389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-francais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 11:42:59 GMT","end":"Sun, 03 Jan 2027 12:41:37 GMT"},"fingerprint":{"sha1":"A7:7B:04:FD:F5:06:BD:A1:2C:76:91:62:1C:65:2E:31:BE:58:E3:BC","sha256":"DD:74:1A:BB:1A:35:36:4F:6D:3E:DA:F8:3B:CE:C1:7C:C3:D6:37:2C:5E:E4:37:3F:4F:B0:68:2B:D0:81:EA:EC"}}},"request":{"raw":"GET /img/games/lucky-streak-3.webp HTTP/1.1\r\nHost: rainbet-francais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-francais.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:15:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 08 Aug 2026 09:26:02 GMT\r\netag: \"2a6a-65885b5aa5e80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIKDtgAQRlTd3FT%2B3SVWiIVBQESoJ%2F5%2BxXMz9hheK0f7Ek87EVJx6A1VIol4jX14jzRq9EP0hMe%2BREB1W%2FDb0zXY7lhkCenFKKDtn6jF30NvqweVSrp6u76dHXJ%2B6MhweJP35ZnEcA%3D%3D\"}]}\r\ncf-ray: a47f07212a65a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":11740,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x165, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb4eb01dde9859da4010d0032a2e8d6b","sha1":"94f1f836bf4dc662df3dbae714d507d4cdc795ac","sha256":"5f18fc5d6f88f3f7b35985f0f5e7b882dce0895114628e82c9bde31cb7547c4a","sha512":"e0a76652c35d2a2ed8a0b07a80e4aca71324b6df39818c14c840985497651346f575bffec3d90c476a65276e958cc44e2d9eea7fbb9d49605d0c220779c78bf5","ssdeep":"192:nltF6IZfgFE4FcL/3UpASu+cnOXIyY2hfUCEh0E6DTKQNxXryhAY:nltAIZfqaL8s3Zh2hf740EQU","tlshash":"ae22cff08d7240a6a0e3c5fc41fa69a1de6af0d0d1583a3150c450ecb12be6f7e361a5","first_seen":"2026-10-09T16:56:16.270496Z","last_seen":"2026-10-09T17:16:03.650303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"rainbet-francais.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}