{"report_id":"9c27fa3b-9f30-46d6-9869-f41f54dae251","version":0,"status":"done","tags":[],"date":"2026-07-28T17:21:52Z","url":{"schema":"http","addr":"rainbet-us.com","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"172.67.133.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-us.com/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"title":"Rainbet casino Online United States : Claim Bonuses \u0026 Fast Payouts","dom":{"size":192627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4430)","md5":"81e9fbc152683b8729bbf77550f7929f","sha1":"018d1b43408b399055a8795005b8613e33cb9382","sha256":"c3673a42cb4a6b8d121d72eb62d67f6ab3baf70cb5964a719c66688f8584304d","sha512":"e80212ddfece7d1d48a8c781c3f42b6f6fbdeb3be426d0f21d533e83901e6e55e223b45b1d3cf1cbd0cfd0955bb393ef5ec0493f3c5b67566fdf5228aa96bd01","ssdeep":"1536:YR5zxgcLzYWoVtSF4r6i27ycJPQbjnR5k76:5UcW6SFR7xJ6","tlshash":"d514e8da23f415a74583c3d27f621b5a3e92d12bc6464508f2bc4be81f92e3edc27949","dom_hash":"domhashaeb87997de18cc3b9ddb537945107ef1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-us.com","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"172.67.133.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T17:21:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-us.com","ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-07-28T17:14:07.080329Z","last_seen":"2026-07-28T17:14:07.080329Z","alert_count":278,"request_count":139,"received_data":5080237,"sent_data":78729,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-us.com/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72030500976e07133d4ebffde1884f02","sha1":"28e8495235627a16dff2fb35c1b48b8bff252053","sha256":"cc8dfb2468554bb99f1cf189b3e301029ece9e88f34afd400e802d76d0f77bee","sha512":"0b186904691e38d4944fea3acb844893e05521df9a14839433b3314bd5bf84a665b99ea34237bb9511eb0b5676ef7edbcd3ffc47b749c86c28a61e4146e6613a","ssdeep":"","tlshash":"5f800008800a2a02300a22eca8c230c0088020283b230ea082cff008020f08888ca880","size":27,"data":"","first_seen":"2026-07-28T17:21:58.126853Z","last_seen":"2026-07-28T17:21:58.126853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T19:57:12.658106Z","times_seen":409954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/runtime.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-28T17:21:57.977087Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/app.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"614439f93859eb949774da21bb3b324c","sha1":"96fa5d909ba3a1c7bc55dce813707ff4ceadc68c","sha256":"8de78a081a5fbe1aea6edb6e4f26bf6d36e670a219ac50fb65723c02fa0c7065","sha512":"f05df3dce5b6a9b7c81d1d84035f31289ca915264cfe8effe1b68f2ca0f71fca11bc24aef62957c391002d470d744a1ff55cd5215a1058e98209e7e68a61bb03","ssdeep":"768:toC6iojJ7dLfn7aJBVawnwxw8H9bBws7blPaNdfPtnaaSReFA78iCKkKhHzLzan3:iiiB7NBhvCfPk978akWM78QOJ7mPbB","tlshash":"cd43c75cb38075324597a232425f920ab2767455208ac4ecb53ac8e5bef8c9d7273fbd","size":58586,"data":"","first_seen":"2026-02-02T10:45:14.569249Z","last_seen":"2026-07-28T17:21:58.071793Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-us.com/build/frontend/app.js","line_number":2,"column_number":54895},{"level":"log","text":"en-US","filename":"https://rainbet-us.com/build/frontend/app.js","line_number":2,"column_number":11829},{"level":"log","text":"en-US","filename":"https://rainbet-us.com/build/frontend/app.js","line_number":2,"column_number":11829},{"level":"log","text":"en-US","filename":"https://rainbet-us.com/build/frontend/app.js","line_number":2,"column_number":11829}]},"http":[{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/santas-farm.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:40.705Z","timestamp":1785259300705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/santas-farm.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/santas-farm.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:41 GMT\r\netag: \"dha87vhor9k6s6p\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQbgZgIQsEfJHd2EBRnKSjgyi2Sa39hRwCW9udiGFZyHqRRS4ASUOp61EblbIQfSJg6vReazbj65bNx0mZcz0jNcJ8bcBKyN7IBUhSkk8dCEQVbXMF5FAaoWe%2BNnlmK1xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fc56e7156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36529,"size_decoded":37534,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c5f7ba2caeedfa0d2f082411ee07eec2","sha1":"0a8df5d5735a4c8db72738276801f6405c1e0097","sha256":"22165127da47da0748382e81f4cc5301e0696a41b4dbe452ec90d4164b4feccd","sha512":"aa5d3b7348f8a1bd0980ba1379b557df949c3b5ec57334ece9d91ac05011b6eb4fcb06c296434b8745e7cc40714b771403848b527dc7693596b2b2a179ee3d3a","ssdeep":"768:EMX85qLBqB2wOUUKXto9XRmln8+jnCE3N6In3g:EY85WFwkK9Vn8+VUE3g","tlshash":"71f2e0aadf50ed97746f1038aad7ae7e704efdc0742917752ce003c9c7268d61066aca","first_seen":"2026-02-02T10:45:14.609568Z","last_seen":"2026-07-28T17:21:57.896207Z","times_seen":4,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/arqus.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.778Z","timestamp":1785259305778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/arqus.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/arqus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\netag: \"dha87v5s310k4oa\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mfj%2FmUakg%2B0RSE5zN4muJgUyCeB%2FYc1bj1hjeg2Pq5V%2F9Rf%2B1Oo4SfgIjZn9C2XUApaCbYETqyLkseU2vTZnSjq%2BU8Z4SRezTZzxkb8oyB6Ca754XPuC%2BOXD3yPVK64moA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe51f6e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6058,"size_decoded":7071,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ecac5772ffa592e5ea82669629ceb413","sha1":"01d9f99e84feaf0417565c5e9d818be6a708f304","sha256":"eb29d8c693bd3f1d03670cf63ef97261c1d4b42e39dc149f18aaf9687e2316a9","sha512":"ad23b6736372baaa92ef1ac42c2150444c78b7c652ae157063e6c1d53957ae874a160c4b674a075c6c6b6ab258393c7730a2fda1ed13f4b9cb34fad1320e80ca","ssdeep":"96:CAWsNUQuPJzWrZYJqcTisOhRaZVG1ULgyKGTX2z:CwNYRzWrZY8xsOh6VMULeGI","tlshash":"15c19f052b93d009e04e5779ab6b0fb3a9195fb930248b4739ec2f4a5ff64c98c05296","first_seen":"2026-07-28T17:21:57.898871Z","last_seen":"2026-07-28T17:21:57.898871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/lucky-rabbits-loot.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.837Z","timestamp":1785259291837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/lucky-rabbits-loot.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/lucky-rabbits-loot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vfyu5xcwr4\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WPSMG%2FX8IoVN2qgKa4vTTIV28jk3d3cUnqPHUTfvCNEqpTpHGFcKFJqTtF9Alca3fecL8X2U0pOS3cFz613SGO26WeDRaEUAbTLdjL0FR5aqtyQGwXpREGfMQn9VJ%2BA%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8dfc1d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42448,"size_decoded":43464,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"662e5a84769383b4873c96d662e8a42c","sha1":"fb1be285242ccad9777e0468830eb79c6ecb3af7","sha256":"aec30f62ca0eb1cd9f4b5c9a095d723f94ef0c4f640faff9884a7dc9ea416363","sha512":"84374058e5f42e33c3c11b69b698acd44bf4c0dcbba09f86d4f6ce90f73e9640b77f4f24617b1b239ff46202da0520ec50129f9da29c0bb82becf276677bb5aa","ssdeep":"768:jD9ZTUQHbE+9L5Zo6bBxpU1bHkyIiltPV9FHZOmaXcs/VZ3Ou//p9WxFvB78v0xM:j7++15ZBVxpUZHtlRKmaXcc13DWxFmd","tlshash":"7f13025b8f61640bfcadbf9c7c77ec6d76b068162930765cb6927a54370d3223411b48","first_seen":"2026-07-28T17:21:57.901409Z","last_seen":"2026-07-28T17:21:57.901409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/baner-1-69c14cc340a311.00397948.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.091Z","timestamp":1785259284091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69c14cc340a311.00397948.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/baner-1-69c14cc340a311.00397948.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c0krfh\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkUjbY3gajl%2FR3z8ZYny9g7NmxOIFCI1h4xR9vFsVZdfJtuFAFiIlKTMDLQliIKEU6OnhfkfAAaRQTDpjPojHoYPd2Cbn3QcjgHZbwJ58TsIno8zcb4%2BqXMzfUWRGLwuRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5d992256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968669,"size_decoded":969798,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"01f6d0b436e4991f4d5a437d9a5ffcd0","sha1":"202ae37c8f2030b367044d1dd765ba5be2a1fdfb","sha256":"7a1d7273ca088d9a7b72b8525d20d264a0b060507657d13fc6b92a4300e04f44","sha512":"77d2baad5f7475dd9828de6173104cbb47aa217260bf33b11ee246c04991f7c3520659f809567740a1f7a713baa2bf032b82731dc9073e44c009f191f13a4f1e","ssdeep":"24576:n3vhBDHOpaIAc5jeNlSfFrJVbWD/PlqeUHMu:n3ZB7QanclXbWu","tlshash":"de253303d7b693e448fc969245c93d9f9e218706efec006585c084a751f3a631fbba6e","first_seen":"2026-07-28T17:21:57.903853Z","last_seen":"2026-07-28T17:21:57.903853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-15.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.160Z","timestamp":1785259284160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yz0by916j-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FIyP3iOl4mjPEfhlRAvBVz%2BvVL6GRqYYjK3BOAKGOzUiXeOpZrTFd6VHOobn23szYiIeVsvwIv6h1bkssj%2B0CdNFJwJNUqtUfqM1R6a4r1aPPRawf%2FQuUV0VBGXAYwzwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e095a56ae-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-28T17:21:57.906336Z","times_seen":78,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/wild-heist-at-peacock-manor.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.830Z","timestamp":1785259305830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/wild-heist-at-peacock-manor.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/wild-heist-at-peacock-manor.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vj55felqd9\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRvdCFtqglL3kBE7KPWDkOGkjLNtLxdlmGFo0f%2Fzhr7RqcPJqnTakPxvO5AnTkIlLpYmPN0K4t74%2Ffo49oFpbBXB9eD0dRsWcnJFIslCFc53BYj5fzNb7w8aiX4Bp8oTGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe57f7c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34173,"size_decoded":35196,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"385aaae60d095ae6822370ddb895ae64","sha1":"07a97f1276561ef82b44e8cb8b92a8a79e7e0ad1","sha256":"fea93a7350a31270408c20ae9cc4cc76fac2fa607115974ad39e88a3512eb90b","sha512":"dc4dd62ac050199a6af7c5d8dbf6141266253a9fab11fd34c875652d683526db83792ccbd8d76395e9a9d18b357b2a3f32521cf7fb0fb8521581b20d109c1b97","ssdeep":"768:lRSesxohMZ+CaIFnIA6rhmxag5PyQiZCv3voN4:lRSMMZBaIZarhCagByQiEv3m4","tlshash":"4ce2f1076a34bffa0d1f1b965f6935b4b202f01a68270d4d21d61fc82b780ce56964e3","first_seen":"2025-10-31T17:41:30.673739Z","last_seen":"2026-07-28T17:21:57.907498Z","times_seen":7,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/john-hunter-and-the-mayan-gods.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.107Z","timestamp":1785259284107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/john-hunter-and-the-mayan-gods.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/john-hunter-and-the-mayan-gods.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vf1hvnupzy\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZulEouLx2A26u09exQ4CAhri%2F6u03p2zpa%2BEZb9HVSqk5yu9hdJsd1s%2BSLO9UYZBlW0D0Du01aoi8Z6I0q4xnGtd2RPWZWw90Hb6n%2FpoJsuBUpJv5IDa6r70bTK8kwIqAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db92e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33694,"size_decoded":34733,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a8c200fc7b07aba57ec300175f6dc3e4","sha1":"c93c252517dd2da3f8e02b28e23a3e90bb157c9d","sha256":"795b8dd940240731bc96200172efc0a6778acf607cc4df4ed2da59eebe8b9563","sha512":"39e2d2fe33e0157ca4a7777c94dd1745a3ca8181c8317a786e116de8f36d83162ba6141ec4615ffc14d8bcacc6c766a59ba45acb8fc5d971816b58a542ba3662","ssdeep":"768:9JO60Z2x0zg7pfiTz/0Vwbqx0VtwIKOFOoE0:9J4Qx0MfsMwbqx0VtwIVFOL0","tlshash":"d3e2e0e036e0ae53e03edbe2089db55c196ecde4f23666048efa52a94b770743cdd950","first_seen":"2026-04-10T09:54:21.462082Z","last_seen":"2026-07-28T17:21:57.908523Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-5.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.144Z","timestamp":1785259284144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toE92Oi12eqT6AoMjugrFM8tR7M%2FwitTSdPy0B8uBv3t%2F08nzVIWxQ6vqY67f6H87nkyKR2ciLzRNzAv9uYySjP4KgaeOwVBH4qRGjOlOAXKgjztDZyJ4UKsROJ%2FoIbNxQ%3D%3D\"}]}\r\nage: 469\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dha884zdaqmwdb\"\r\ncf-ray: a2258f5de94d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1284,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-28T17:21:57.909885Z","times_seen":78,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/banner-jackpot-69c14cc2f16917.66033706.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.355Z","timestamp":1785259284355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69c14cc2f16917.66033706.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/banner-jackpot-69c14cc2f16917.66033706.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c028aa\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHtCV2Dcu%2FzIv4qCMvVFfQsLq9WNu3ssTHzz62Uno27y24o63m%2BgM1WVLHV3CEuoUn7Chl1G3ufp%2Fo56UnSfl2r28fYZiEcLVaPe%2FdkPpJRzEM6o1jLqD282kaMgO%2Bo%2BqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5f397856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104050,"size_decoded":105109,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"5c2687fc9e50dbe4949bc91c4f9b9e55","sha1":"8e72a3f2571ef1f38048f1ae47feefa9e186ffc0","sha256":"71732b9c2e208b43c7fffd612f92fa83de288c7825b035a1714444bf2a51bb95","sha512":"91ee0f8b92178a1c2596d4c6a0277afffbd8e79b2af3a9a5e0f4d6756eb8238340ae0f67312905f957d616bde8ce2da41d3ae3526319c4d9ee36b6feff3a8650","ssdeep":"3072:uK1SaLN962Rm1KNpFYXBn++xZrNgfNAnhjxf:uaSM62Rm12jV+xZrNmmtf","tlshash":"13a312ffeef1a6b42b0e03b4e19671ce7958075472001ec46821cbaabdc44d66df6686","first_seen":"2026-07-28T17:21:57.911005Z","last_seen":"2026-07-28T17:21:57.911005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/apple-touch-icon.png","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.598Z","timestamp":1785259284598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TorO9AgpHVx%2F5mUyrVsujIaW%2B%2FcGz0aItRIb%2BlFG3MjHJ%2BigJfDzuB6GCDazSTg9LEH%2BOeDhI7ynVv8doXWs49VcEJZqTSxJ8j9kAenXLUnH7%2FHyKwCQ7iBdPsOCEJ0Uyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f60b99e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29909,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-28T17:21:57.913508Z","times_seen":30,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-7.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.147Z","timestamp":1785259284147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zfoh301f9-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOyYRHjjf%2BMyc5utLdMyUwrK8DkSeYgbB9kIeUR1jY5LF2j2liywv3VhVScQkO0ENBpx1nmOmmmXA%2BUIbjdsUZhedIHf7ank9CczTFk%2FmGnGSirPQJEgfdgkzxX%2BF%2BOLMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94f56ae-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1845,"size_decoded":1900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-28T17:21:57.914649Z","times_seen":78,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/ancient-egypt.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.813Z","timestamp":1785259298813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/ancient-egypt.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/ancient-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87v9oldezlrc\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XONozuvgpGYNO27z0Lm2Jhs0KKWInTHOEwh3qbIlIhg0bws2zaEn5T2mg%2BDky%2FYLMr%2B7APThDfjF7ClX6xLl87kJ8iBqUhaQLCP5FTeUovlTQ5haOY9LHFvcw1Jk50oEog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb99ddf56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":29211,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"015f61fb3aab45eba5ff5e0ae4d0a2a6","sha1":"01c1d28b6a8c3e5085a22d0916ba98d002382f06","sha256":"93f64321a5b5ebe715f6c9c5364804db529705f32f664b495f1a358d466553f9","sha512":"c70a18dec451513c143e7029089d2c3f66674e1a35af0c0e2dd20901172c182fd357ca061b7bb1861f0c40c4e31253315af3e0ece5fe9d93427df7a178bb1e76","ssdeep":"768:ehj2TklE3xnWNTDJ73F1EbsJh11rP0zeRPFYP:eB2Ii34NXJ73fEAJ0iRdg","tlshash":"99c2e18612f17d9fce5c19769465c89d7f03393e580163a085a4deb00e8b4cde6c60bf","first_seen":"2026-05-04T13:03:58.885678Z","last_seen":"2026-07-28T17:21:57.915748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winning/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.330Z","timestamp":1785259305330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 109\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":109,"data":"{\"exclude\":[\"549\",\"884\",\"1038\",\"533\",\"1173\",\"1394\",\"2471\",\"285\",\"356\",\"2021\",\"2111\",\"1114\"],\"locale\":\"en-US\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DndIaO1NBfYoYREqxHxo7YssgasDacjV1IXcH2sDaqhIYk9pF7F4jWYJvE1rQgjSDuYsrA%2BbvgZsiVb9sGgn0XyRKgBTTcYIByyBD6ac7ydRWoKdRleuKrxjbqs9LK93AQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258fe25f5956ae-OSL\r\ncontent-length: 580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7499,"size_decoded":1559,"mime_type":"application/json","magic":"JSON text data","md5":"0737533c025c8e6dab629f3e4311d135","sha1":"45e6a68378e507dfde7bb0b7f953e87a3ff540b9","sha256":"3fcfc0994eff114ad9debe7f8ea2ab9cf1259259aa54d2b712ee8abd2983d2f1","sha512":"bb04e7ebb42d8bac0f6a50b777911c5bc546503a380e10d6767f9dcdfc5e142731aba4901a486c6cb66327dc6109492ce707c22ec23787e3797b573873c02348","ssdeep":"96:PfSVfQfMv5fWfpfVfwfKfQfTfCfKmfMdfBfMD0fhfMlfTfWfgfi9KfjfUGfv:STy7","tlshash":"52f15d066a62a23fbad360e0cc73efde1454e972542d4038bdbf2992d3234245fd965e","first_seen":"2026-07-28T17:21:57.91823Z","last_seen":"2026-07-28T17:21:57.91823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/english-rose.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.822Z","timestamp":1785259305822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/english-rose.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/english-rose.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vce8hrgpqp\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xpzSTNNEiaj%2FhxCxA%2BWTkPkuw5IgYnvqBIPrNSDVLSaxCmgdWe6GRHZXbOVLrm3fwu7zT72mPNucGaBc6CstrXO54%2FhuMsrect4i19gmaYJ%2F7Qnq7%2FmTZuMPTe4W70UZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33361,"size_decoded":34375,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c4c1cbf5e2e54875b9fea5dba0a56b9a","sha1":"5886dc9f8ca8c6d69fd45331afb75e3ffbf45b21","sha256":"f4f9ad81bfdfbc34a09c5035c9425608380bd92e53f09dd04526848d64c15630","sha512":"94044d3d6093c2fe1003282335e6e0f06a77061ed19bcec1041e635ddd729c88718d4b4d8a39722916e9b89527459d2787b81e4f8247732c2b9be2ce9d083189","ssdeep":"768:DWFskcGFhzCCPGF1dW12X0f2YAZNs9MidJeNZVJOojLG:DMcSoS12kOY+0JenVJY","tlshash":"6be2e1473a3cca3bac0d053908648adb1754f9811e184fbe5ae73a1bb71a4de7869531","first_seen":"2026-07-08T02:30:26.316269Z","last_seen":"2026-07-28T17:21:57.922087Z","times_seen":3,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/previous-arrow.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.092Z","timestamp":1785259284092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rN9TVLbwMHLVBj3EwGSOPj8tOE0V%2B%2B4%2BC34aSUNkODGT36RL2LJeUk4XcUn8e24MsuZwzKGrYbxGcHKPMRZX2uBGA23KcRCgWH9XdxQZfWA39q41%2BtiwyIYRLtl7M1Jy1w%3D%3D\"}]}\r\nage: 470\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dha884zwcm7r6n\"\r\ncf-ray: a2258f5d992356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":1165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-28T17:21:57.923701Z","times_seen":103,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/1.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.164Z","timestamp":1785259284164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t1be-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSYr3ow2jorx0rfcWUNzFeiw%2BGdaxv1%2FwZ3BtLyrWcZ%2B8t4NTAUnwzhLM2s%2FsPdtYFpQHeqpgkdyn04jlHwARfu9Nkku5w%2FcplJqABA0R8MY%2B4tggeq61mnlKKnUOJIhRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e096056ae-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1738,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-28T17:21:57.924772Z","times_seen":94,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/flowers.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.810Z","timestamp":1785259298810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/flowers.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/flowers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vcsiwg4jhk\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gA6VquliyJQv04aTLsbBWMvKTXJLMry8sxRdgHipCD9Q6jba3%2BxCKC5C%2Fs6xBGSTIgyTriuhlQemFSDcHxXv7ppCPks8Fu%2BKJKfzYaGUVIgz8TxQ1w1rtkMy%2FQvyLzqFbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb99ddd56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25256,"size_decoded":26263,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b31fd860889009d2bc05f7b5ebbeff00","sha1":"98311892c0a72bdc1d38fc3c708a73ba441c1ca6","sha256":"a7fec31c53262b9498bbd3c5840ad49723387482d6cd07d51237eaa5c176f30d","sha512":"4d886c94fd9a5e5cb7616143e0b73751d49367c37fa60c028c622c220de8ae5f90c2c13d54cc547d0f3574e9ce1a97ddcc97afcdccb595a426555bf56b2ef1b5","ssdeep":"768:b+ykxgL4QiPQqNyWprvxvkT8PMLLOC0K38I+7/P:C1qvmprv5kuMLIKM3zP","tlshash":"19b2e1dff3e3d066ccfa23e0169a80de5a9b45a18ef41461b8d1e7633d5890734669c3","first_seen":"2025-12-06T17:29:39.327893Z","last_seen":"2026-07-28T17:21:57.925828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:48.335Z","timestamp":1785259308335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:48 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:48 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcJjhbAFWHwlUiQ3xIR%2F%2FQOFRjk7KWWlv7nX1DqQFPhD2BkCBrin2mNFaVcQXvD242PHCiSuCn35fYG%2F4B9rBmdswVgMUSg8kEulcQRqVp8sCSTFHK3tUdITLmZPGqEmhQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258ff51ff956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":1032,"mime_type":"application/json","magic":"JSON text data","md5":"67caafccbba4b109d359038e373dd75c","sha1":"2d70dfdc88fb7a8b852374b1d34ae7a0e8bdda2f","sha256":"d3536f67ace55c1a0065250d333cb27055bd31b132acf988a21ac0d48d2ec5fe","sha512":"0ec773bb3de0630eb84e816f02bf383157097703faffc0523a3a38510961b801ee03d9688562ca36fc0c29d66d99ab5a66a1c63ca57dc8a4a0f941c657023bc8","ssdeep":"","tlshash":"47a022ce80800b0a8bbb08002c3b3be830380f83a0aa8808fbc0fec30c300230003e30","first_seen":"2026-07-28T17:21:57.928232Z","last_seen":"2026-07-28T17:21:57.928232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/next-arrow.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.093Z","timestamp":1785259284093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZ32U9kB8aQ1%2BHEZaTqnX3l971u9O%2FkM54z83xmKBZpdS%2BIW6FbGjnykmYV9lem2J7AdCEjyKIjRiasOn4oXWf4Tp%2FBHjWS8gvD9Nu8TGFFSmmGkFXMxNl7lUussLnf5Sg%3D%3D\"}]}\r\nage: 469\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dha884zp7evf6t\"\r\ncf-ray: a2258f5d992656ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":1167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-28T17:21:57.930486Z","times_seen":103,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/muslak.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.131Z","timestamp":1785259284131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/muslak.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/muslak.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v7fme7a57y\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=df4L3ST75kA0cKiSFybBMeNFIgIpEzkBoMD8yYIEK9tMepxDbynW3rABdm6DB4e50FmmscMrpc2H3GHcxdoZKsuuqIzYk8vcWhIEdgy645pFerhtgNuhomha99qI%2F7KW3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd94556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6766,"size_decoded":7777,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"c6cfd8206fe7a1b7b493d9c5a12c067b","sha1":"48c545a644ce5cfbe2386d9bc318a9881ff414bc","sha256":"91509937fa44305b2e5d3037344a61b1eed6fd79e95b12e62f1866c5c3cfb7bf","sha512":"e69a604d4ecabe0bc7e034902b8c3db8035f1dd60a1c252128f98a30d43a63d77529313730bd3c1f8394dcb682b3ce4db1f9897954872e6f670133f48eaaade2","ssdeep":"192:HwxrmKl2evKoWUL2efpG1mybO/NHY1/689:H+rn8oBG1mySNHYY89","tlshash":"46d1a0daa7d44c00d87f2075d93e0b3d9a60f8e0b5665e980eb04e3f6b244a897c00e4","first_seen":"2026-03-21T02:18:55.630187Z","last_seen":"2026-07-28T17:21:57.931612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/live_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.169Z","timestamp":1785259284169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zmtofb1y5-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iNv8m%2BfMW3YN5uTLJVrShwcniGCUCS5WPN02MAVyCf0lgugnNm1loPw4Uptqa2yjyZE85%2F7vf5zfVWxQW6zP15NO2NtB6nOpkAv59WHhAtxND5cIyNU%2BDfgNIBXxAUTtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196256ae-OSL\r\ncontent-length: 925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2525,"size_decoded":1947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0c05ebadf4fda67faa8b90d5424c5","sha1":"f81ff1ed17b5ffba223d3a06d1a3628fb198cec2","sha256":"f8dc8454be75f1a4ce991b485bbb1f1650428409c820b3d9b8540fe5a538dd45","sha512":"ff6e2ddf5f392b184b7d49f702e314ff8cf3af53e7eefc4150dd84a863a30eb627a9dc6f0174ed3710e72ce7ae9831f52bac374779670d653e3d78914bb63616","ssdeep":"","tlshash":"4d510ef3e2cca2d19003d7e4cc079831b59b6cf767daa3cb8272ed44ab30165598d865","first_seen":"2025-09-23T10:56:20.264777Z","last_seen":"2026-07-28T17:21:57.934886Z","times_seen":41,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/crocodopolis.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.832Z","timestamp":1785259305832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/crocodopolis.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/crocodopolis.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vbgw7hx11j3\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZn7RtD%2F9uwq%2FkxAsMcsHnDyOv5Ojao4w5wG47s%2BCs2wTx%2FSvZw7UN%2F%2FcgzljEBeq83dkyxynMtincTnevRyR0w1ul9ppeQD97vEsraA%2FYdyXPjNIfvS9lpI6L6Q0qA%2Bng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe57f7d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48639,"size_decoded":49660,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3e31bcc1cadd4b8efe99956169d51f56","sha1":"40f38cee030102d3d4c00025da43927ca3d09693","sha256":"b57ba44bc5dd7fe91ceb875521b8cf925a12dcba766623137170091531e29679","sha512":"ad34723ffc84684e8f2815c1a0016ce6326341414d6f401d2f8cadea5598f35418a56c1e00577ecf0abfc80b617df86585011689c39a32fa88d9a63abfa95176","ssdeep":"768:3Jg4fVG8d/Z2MXgPO+iVuwz183klauzc6VHn2Kj3o3EIW5+OBl0BDKwz7G/zLdc7:3JTZNZlXgPO+iVuM83waUc6VH2Kro0wF","tlshash":"7a23f2bc57b3e98ce6b447108eb1f74220761d03ab63bdaead91e935b7134c158641f2","first_seen":"2026-06-11T03:08:59.167538Z","last_seen":"2026-07-28T17:21:57.936064Z","times_seen":5,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/harold.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.123Z","timestamp":1785259284123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/harold.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/harold.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v6u6s6b5n2\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=94uRyTBYIxwn8dB56JBO%2F5wnSZshX6zTHbw1Gp8suuwek5e5dIjee1z3kBVNat%2BQckPwGTWmjIas2AoPeAZkP0SibuAd60okoD4Q8OFeDpyOIqe2MFq60ZHKFDyDuZon5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd94156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7310,"size_decoded":8323,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"3892c25524e9b0d1a806c1d96c141756","sha1":"8f8fd9dec6f9118af45e3c6952b6cb739aa49ef8","sha256":"5684d81fcbc5832b51fe9ac2f70f8aaa1092b165dbca9dc3e4357ec315c609f7","sha512":"3c32289e7b32f0bed6483714444d3ee82decd76070111cdb10418eb0e442b053db470f1e8f19b12480bd6160c3211414ece778857ad270c70ce259b87cd8f63e","ssdeep":"192:ks1dz3GYeq4q+L6k+N0BqeMbYyaVBGdV3rv6GN2zQPW3:hDz2ghyBnM8yVdV3rvX29","tlshash":"fbe18ea6c345a10efd3d55f3b083b3316346ce96a0f45eaf146922652b5e6f1b8c3ac1","first_seen":"2026-04-10T09:54:21.384064Z","last_seen":"2026-07-28T17:21:57.937214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/madame-ink.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.799Z","timestamp":1785259298799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/madame-ink.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/madame-ink.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vg3lmtkk6z\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndStDevqkGxLAdQ83oLk9%2B70XV65GsHe%2F2FnNlqleR7%2Bqve6eNjwPozl%2BaePzneNbgp43iOBnACMSLrd3TfGqv45iYz8oxQtRgAj5wDcj7nJJtoNfRu2w5dfDuSHsJpIdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98dd756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26171,"size_decoded":27181,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ca7efaab4b398e2b302a002da8afdc41","sha1":"1967307dcf5fab367baae1691aebcac128827cba","sha256":"61034579726d1cedb9e934981fd72782039dca650936e1ebdae915aa3fc73962","sha512":"462bdae6dbc570d47aa64123a3c3ecb89bdcb4c58aec9b42363977dd02dddd76c0d9311efb1403deee311467ca7bdee901c1b873ee1b58b6295be10749ddc7d4","ssdeep":"768:Lxz6W0rvrYitxslGlzKR87cOYO6+1u3RZkijxPxfnnyC:1ebvrdtqlfRSIhHl1nb","tlshash":"aac2e0b32b54db18e14e02f64ed0133576dca9497fa91e8fa847327cfb83904a2751b6","first_seen":"2025-11-01T04:33:33.227849Z","last_seen":"2026-07-28T17:21:57.939577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/play_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.097Z","timestamp":1785259284097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884ztyvrngw-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40naLIyFflDvRjTqKBu1HjzFDPg7I32c5OMNhuXFK85vNb7ad8jLjUQwboZt1takQka%2BhdemhF2OUauRpkJAe7dFFqnX83wPmOKGAKqWBoWj7NYomrwnb8rAkAJ0Rzwg1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5d992956ae-OSL\r\ncontent-length: 317\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":608,"size_decoded":1334,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a94e7b7d682e6965e90fd1c8c1e26588","sha1":"92bdeef1467d74e4c07e379d7854938d7e452331","sha256":"9b6fdbc7ba3ac3786f4ef6dbffcdabb777c75c65fba811a71d63e9687abe49a2","sha512":"1e7e06a15abd8bb77e04f29b5f6e9d253812858da1b15eae10fc88458cce7452273421c57b3885b9c33f847b5a8228d09c525adff1ac455fe66b9d8fed19d5d1","ssdeep":"","tlshash":"7af0ac96a3fc32d4e1809fe134e1242134ef28e73445cd26dee86a05eaf71cc58d8514","first_seen":"2025-09-23T10:56:20.464745Z","last_seen":"2026-07-28T17:21:57.94064Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/shopping-spree.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.102Z","timestamp":1785259284102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/shopping-spree.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/shopping-spree.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vhtiqgek49\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1a%2B3IXBGsvMfTzwUZ9Q0B%2BqvhAc3hjVve%2F3efr2bgBJNOv9QhCskqLzEuvU99d25eJhV2xpNAZbpqTpwHnX2xijUHrILxGURITBatu03ddrxyk44fWjlEWTCozxv8weOKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5da92b56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26073,"size_decoded":27094,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"8666871e50903ba8b70398808f739ebf","sha1":"a139938860d0e7d97154444eb074f07fbc16bb4d","sha256":"8f978977c65481fe99cffc3cca6602803d982b3e7c9376abbf89d8a4c4494e16","sha512":"f7484fd9c9d007e96be931cf10912c7e51fc65cdd0d30ee6c212c196f7faa199c2d0c61b0733a739c4737a222e908c0d635b34d0ae77cc37011c9bf8bc27e1d0","ssdeep":"768:3vmLjA81NguDwNRM9sVvhZKf4EKOfPE5d3o:3vSAyN+M25Z449OfEd4","tlshash":"6fc2e188fb70a719f0ab7a9cd70ea4707e4568587827ea4f2da47f31cb325491d4a071","first_seen":"2026-06-01T02:18:17.523222Z","last_seen":"2026-07-28T17:21:57.941628Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/18plus_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.171Z","timestamp":1785259284171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/18plus_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/18plus_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yfygde1ar-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qIUDfn0Kzpe9qEZcGQFjZw%2FAkiN16C9WVFnGBSqbXrCG%2FBM8maEm%2B80GDPzug0Y8dgtKzD%2FesHBUK6XmQzlw9nWo75bky1xNWcQuxd8xBYtSP64MCaQ7xXYulpYRkN4OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196456ae-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":1708,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0f9c719dd4e1c3f2c9f15960daf78f3","sha1":"01729b3afd78d2cc88d50ab64459d0238cae0b0e","sha256":"eb4781501da6404c234bce791187043ffd8b76ff71ed4c47bc642bf6983b9b8c","sha512":"b46d36977240a08da3731fdf869363ba9ee385d0a546a716803a98675d8e3cb825b8a42f070a1a0748d87c08dd526597805802253639a509e98eff6b5b1e2e7f","ssdeep":"","tlshash":"d331ccb7abc872e4d64557e6a07a7518f67530fbbb5acf05818826647a0117fc1ccc44","first_seen":"2025-09-23T10:56:20.497394Z","last_seen":"2026-07-28T17:21:57.942588Z","times_seen":63,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/banner-popup-69c14cc30f1db8.43889989.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:30.328Z","timestamp":1785259290328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69c14cc30f1db8.43889989.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/banner-popup-69c14cc30f1db8.43889989.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:30 GMT\r\netag: \"dhaaqrrhp1c02vvh\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQL1%2B6TPznqUMGL5Iy%2FvbAvkN87XwjK6ywjageKhExtl1Ljk%2FDi%2BmynxvvYK6Fz8JSABuP909ZlI4FhnMyF8XpXWhhcPWLaSPrvM6YrOqxSFm3oxgaayllQqzMFIzwoCtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f849bae56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134621,"size_decoded":135679,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x342, components 3","md5":"7d322e10ad90a5c0e5aa419516e5c171","sha1":"5ebbea8dd94c965fe2f6fa2fc73d23d8684db6bb","sha256":"af07d9697815d4409e0c16e5664b67547d04934cad71706af80cf7f66ddd6138","sha512":"bae6fca973493b15464deadae04e52c5cae738815315aaddc8b0d2f41467416e30ed2931b0da866ea2af194aadbd4d27630397ba418c08472011d7bc45880d01","ssdeep":"3072:TVOsPHnyWf1Llt6x/7UjEGG7EvVLuOY72qharRP:UKHyWdlt6xjUjDG7OVLrk8P","tlshash":"4ed3122839c03b23efb71fb89f117a0542f052a5e6e9ca9978225921dd3578604caf7d","first_seen":"2026-07-28T17:21:57.943576Z","last_seen":"2026-07-28T17:21:57.943576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:30.330Z","timestamp":1785259290330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgbEb0r7sdf2zsLYdLNuaa%2Blt6y6n5RfLlsxJ9Lvt0VdL7JieZwFNhNty520i7oY2B5o3eiKyDyvMkUdMlYw6lZEBVj8FZN1Rd0TbwyYIYqngcgU04C0MgY2q76Blz%2FVrQ%3D%3D\"}]}\r\nage: 470\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dha8bwf2b4td5z\"\r\ncf-ray: a2258f849baf56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":1176,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-28T17:21:57.946336Z","times_seen":137,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/cowboys-go-west-hd.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.852Z","timestamp":1785259291852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/cowboys-go-west-hd.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/cowboys-go-west-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vbeih1tg1a\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXbWkLHiLhPVhTETdIhX1%2BlYY8e%2FKT0pgsW81WLeE9tDX3USfFuaolLu6EwFnzDeL5PSaW6%2B51YHfiUCzXH8JWEG5gdSe4pxGlbrCcqUeifGvBVbxYz2MSX%2F1WLejyIzGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e1c2756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20782,"size_decoded":21800,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c2b8ea772352ca0dfc61d246b7194d99","sha1":"3bc63d5eee2a5ea5517020e5788eed9aaf179167","sha256":"9d2babe69d89f01cedddb143571f77f3d036aafb1af30573003b2b9708c637e0","sha512":"b2f675c8d7c2f41ed3fd4cf55153495b6b30635f6fa05e7af4b912ccc047b8ba82c5ad76b3c6d53b4e9afbd2639dada50d04d057a3455292ac7ccff91685a9fd","ssdeep":"384:XmuNPmD5fpCUhai6MUo9pTjpuuSmE20p+sIvqJOC3r9Umwn:NpmdfpdnUo9ZLVE20pZIvq0dm+","tlshash":"7f92e109a61f08c4e10e5d19ca37ebb617b04f234fc39ce2421baa84cfb68d7d75555a","first_seen":"2026-07-08T11:58:06.182271Z","last_seen":"2026-07-28T17:21:57.947448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/book-of-rebirth-reloaded.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.826Z","timestamp":1785259305826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/book-of-rebirth-reloaded.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/book-of-rebirth-reloaded.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87valxnoinjl\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfHKVGAD4M5DZZTHhCZV242k9QEE2feMu%2FTTsnfWOKK72gn4JUrd5DrKdWqy2B6TE2f9dkyhvbwq%2FUbu1u5zmw5aQRxWL7Qxhmb0omcpL4T0I%2FZyzN0tv3MgJFZ1RzWPjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30513,"size_decoded":31535,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"c8b0c18c0dc78c5cb1af2c56c5fe8c1b","sha1":"307ab765c2ab37dc1921e471ae8f55e506397200","sha256":"732de57f339a4a6a99a204d354988aeb14deb88fa32afeba9ecfb3c3cb472994","sha512":"1657903a94d80fe52f0e073447fb5c30780f72e27f6210bf486106bebb9cbb2903bbfa623d9dda61eceef7214cc8a1060a401032f0e875f1af399e8b7f70709d","ssdeep":"768:V35OFD2cuRB69kjk4+prQ8VHV2RKxONdAhiC78/y:VJOdejIxV129NdEiC78q","tlshash":"73d2e11167b0ec59f11e4fd5b346b2c116084b4877c72387d9aa2ca9471f6a87c348fd","first_seen":"2026-02-10T18:41:07.136856Z","last_seen":"2026-07-28T17:21:57.949589Z","times_seen":6,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:36.337Z","timestamp":1785259296337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:36 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezxuehj2vRke802KDgZMAMH0u4rBr8DLq3GxMgUsZ7jdl6ZDTXPV%2BgW8qyykqEgy9s54SnThWA1qa8lYkHewdTyPRvz05sz9hC3D7EcqkmgIIPu%2F7WRPIxheOxwTOKUV%2FQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258faa1d1256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":1024,"mime_type":"application/json","magic":"JSON text data","md5":"fe36f8c28fdd2e61088ed50aee823d0b","sha1":"7b16c42ab739ed53e85daea38be3a0ff652124af","sha256":"28ebdc1b50e7d9d4fab697fa691131181394204163d3fdc682a1eaeff5ad4c6e","sha512":"12bcf1b248bc79c494b08c912e96d20d30d74c3bda12fc086dac6a148386d020acbda84f7cfcc15faa3407c471af52d8dc0d95de1c5fd42b638c0dcc0b6c15b3","ssdeep":"","tlshash":"cea022cf80032ccec23330000c2b3ac8a0a08e0f80a2cb002bc08ca308b0a02e203c08","first_seen":"2026-07-28T17:21:57.951612Z","last_seen":"2026-07-28T17:21:57.951612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/bejeweled-2.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.805Z","timestamp":1785259298805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/bejeweled-2.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/bejeweled-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87va0i1njml4\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKHthhyhNTqiccrjGMxMyGxOzp1IVh1hlAX9IwuG5Ttt%2BPd2xjk8vICgsN5wrgEc1iIuJ7wDW3lVogXn6QhSy67Uj9NNkGXmFvmmgNgJkAqDasjF5OqZeNrlra8CS9QPsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98dd956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29272,"size_decoded":30277,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b1a3ca6da8bb66fba9ee8a9da00d8858","sha1":"dc66b24a35ba7046125d13b7f421459cdca0d2c2","sha256":"8597fea4072b86fa09137f95588ccf3f0f4810b548c5ac697bfb5206442b63cf","sha512":"bc0762b7a9ac53001790416a5a4515259b084ae7b75b66180b275d86fa25c980962b92287a211f91552391ffd8e480f06220f0342503c0ffb1cd177fc777c692","ssdeep":"768:460z6LMwpr/ZDEXU2/4KczGoSCVD2ZL11DP:4a5p1DEXU2/4/ZVDuL1x","tlshash":"fdd2e1466f29dc66c7ad709010c9ff31e6910f20f266e66a51d4ef0923798c8922d2ff","first_seen":"2026-02-10T18:41:07.154909Z","last_seen":"2026-07-28T17:21:57.953417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/blackjack-classic-53.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.114Z","timestamp":1785259284114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-53.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/blackjack-classic-53.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vaa0zfzezz\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yIZPtbleOOgi4cn1JoDPdoCMEo8vs%2FxEvnFyw0yT2%2Br25YeIVdQhPQBzpJhNTWbpOAl50t3oFY1IQsKp3RMA8J%2BWG9zuL7DakJQvjmhradB%2Fs36HH6IHvI2V%2BeKHPMWEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93656ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20470,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-28T17:21:57.955592Z","times_seen":58,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/live.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.134Z","timestamp":1785259284134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/live.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zkfxz71bg-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQTTrPAM8hGsC4zzb5iW1u1HdsJM9686Xdb9M4a559VVr2vJSh0hBUS6juW4q%2BCmTv1muACf075ppswsOqIQUQHWXxjJ9T5il6a27jG89pdQ9rXoDgGrTyfIP%2Fd1ac2iUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5dd94356ae-OSL\r\ncontent-length: 783\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"424b692dbdf804909dfa0f0e05875db3","sha1":"035533bb122a899b689c3c92ba852f1cb6d5aa3e","sha256":"cd67b8fc999babe3806e7104c2ab4c2290a7fec77cad61194596eb71884107de","sha512":"54c63fd0ad9e267c765abcbfe7127547e818329b17ef31b379a23141da7024aa5d843010f2d4c517bf3d336cb512d33b8ea2b8032fd6aab8c3e222ae8ffca3a8","ssdeep":"","tlshash":"043154f6636433c8d887c769d696be66333718f4372286c84be82a64cf61c8d5d54c93","first_seen":"2025-09-23T10:56:20.356068Z","last_seen":"2026-07-28T17:21:57.956531Z","times_seen":42,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-6.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.145Z","timestamp":1785259284145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zdaqmw15o-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jiFqkaN0jg8OSgry6FAVZVGk1RusaSKCr93QmaWAESxFap%2Fzpe%2BGizl0XNjzNHfaU1QO2YEodP9MXltvIvo1F8S%2FDz2%2FebUVEXwZgXXUyyVMaumLR7FaN3Qlfbgb0BVY%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94e56ae-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1708,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-28T17:21:57.957418Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-8.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.149Z","timestamp":1785259284149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zfoh3016h-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2HdIuzfp5oXEkMFng3xg65zIj1egntSbJxqkUPFPZn%2F0DUGdwjRmHlyIscUI1v3e1ML1aFfv7rsPejqQlI%2FhUqW03Lo5DyWLN4SqNVo64iKUBTinOJebgT80KBsqnYr0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95056ae-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":1711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-28T17:21:57.958308Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.357Z","timestamp":1785259284357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf2b4tdhf-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWqYcZbcTXZRaJmWEt4UCDMBWkz0F%2FYIdb6fZaRcvueZP8cF252Gq2%2BS7N8KJuaYYiHX9l1JaBLh1WxwwG19VH36%2F2dgA4JBxB3m7QlKiU3MUI%2FZCw2E%2F4bYN0vzQIrcrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2258f5f397956ae-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-28T17:21:57.959195Z","times_seen":113,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:30.334Z","timestamp":1785259290334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:30 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvevIq6fEE8ib6fXjLN0V0rW1Y6rRTcPb2H71Kv79M0Ole7%2FuMsgXeZWMFF8WeICxLhNlZJ0G0DjTXEvltGqqqmaKbOqIXzBmmSISQfebeEiJZQVmwczdYst77gRFKLL1A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258f849bb056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88,"size_decoded":1030,"mime_type":"application/json","magic":"JSON text data","md5":"fa0101cf1c27b258ea967c7ac6475ab4","sha1":"f5b2a8a1b4fcfc18d37a7590e023ecae8a372165","sha256":"ca666c2c228271f3f4c11deb7be2963e5f2f84fb86abab4080210b3a8030fcd6","sha512":"8b76cefc37fa843acbf91fcbdd77fea9b77e6776078f2940e2ab09b09f4171ac33a6e64ac40839353974302af21dadb5f4f6d1d49b1d5adf25882a3a69a9466c","ssdeep":"","tlshash":"61b011eec000a80ba2230200c88b3080e0a20e2388a8882022888c8008ae0c20022e00","first_seen":"2026-07-28T17:21:57.960757Z","last_seen":"2026-07-28T17:21:57.960757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/lubigro.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.120Z","timestamp":1785259284120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/lubigro.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/lubigro.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v78h6uy4mi\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TimDXkYWEaT8dt83DqiblPBxywG7PkNOTDIsmqcTZJxczb%2FP2ilqVzMV6QeTpmnNpheRzV64LUtI8wngWEmeaCT2v%2BrcRpMrzDK3vvpgA2OmU%2FS6iov3YIB2dMAhVi4D0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd93c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5994,"size_decoded":7010,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4b641ce8d1a2bb5f53f00e0772e11d44","sha1":"9a2762bb051eadd18b4e92bbd6f122d1316982a8","sha256":"84bd6c8d7335378895ff1134dd59e592cf5955552d411a88e3b9efb6a4d7f953","sha512":"853e8e4c9d3c1109e83728ec2ce30de4f53d5132d173a8b8940dd9b6ea4104b6df71664bf90cb54bdb50c41bfa68451f651537d67bff6496fb4eab1d3564395b","ssdeep":"96:Aifmf7DYCa4+FZN2RSI9dfT41AZoaAXb0trmP9IQdHnLITzJKIPGKJfphkH7:Aifmf/Ta4M2II9N41AZoaAL0trmlrdH3","tlshash":"9ac17d272b08e487f97e97735a2e1197c06aacc153c49e23c0e479553bab847cec4e25","first_seen":"2026-06-28T15:18:42.640714Z","last_seen":"2026-07-28T17:21:57.962583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/driftmaniac.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.121Z","timestamp":1785259284121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/driftmaniac.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/driftmaniac.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v6fwdhn3qc\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFngeaJTQ0VqViFqYzcHxoxCqonGm4QqYN5V2WcQPwDnJOvvVmoj0LBNbLPR%2FmFOz%2FCYBj5OpI%2FIvcZkCD7iwhc%2F0V%2Fr916D70EHNj5iqJitS8%2FwcJdlY00SJuKoUrN6nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd93d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4836,"size_decoded":5862,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"eb30d12ef9579f40386b7cfb89687547","sha1":"f1182b552ce479c0bbcee5da4a23e264108398a9","sha256":"ae550257df91c37d46ce88282fccd144e0bf5bb087aa5ae281072c43aa627727","sha512":"3cbb845ca86b03e9e664ef6dfbf0ce00f88384afb82e4ba6630e3dd2d6b1528884a37ac744b9c451447b04ebef8e02cc883b8beed81dfb1d49f30b0267553e1e","ssdeep":"96:02P77B22M/0/iBZ12EzWwrJy/wX1WygrD8nyN6YosFsU6JGo:ND7B22uCiBbLWwrYYXM/ruysNsWJX","tlshash":"e9a16ca92b738d1ad3ad45b79b48b3715fba8d3af61b3369dc510b407332194198c171","first_seen":"2026-03-29T06:05:12.866598Z","last_seen":"2026-07-28T17:21:57.965107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/play.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.136Z","timestamp":1785259284136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/play.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/play.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884ztyvrn1ir-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96Y4GKGqiDGjhagFo1iFitu4h5N6At7okT54AEHyuYNdrQ36WCjUEwdYtIkPu45pB5V8ZLLX1y5HBK5sttWpvHMLZB6rBWUAi%2BwYRqP7cTaB%2BkyLEj0qIBctKduhU865DA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5dd94656ae-OSL\r\ncontent-length: 893\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1971,"size_decoded":1908,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1652dc836e9e756a570c40ae6c0a5bbc","sha1":"6d2243b6a0fa4bd2a61b12bf08968e3dcc5e6775","sha256":"e989bbb6613f7d37d8a9504c1c0a38a8a77dd884d8f61e583266413e786f3e35","sha512":"a106fe98dfead7d3bc32a965e2da47303c92e67e12300b8b6ecefde092f8137f40dd01e2fdcc3fe2bdf4ff0a70b79635b67a75a0d52fb9ce31a5a944c2d6852e","ssdeep":"","tlshash":"344143e113dd3158b582a7fd512bbc3a36020cc729168a78759818ebecc28ec8df0d67","first_seen":"2025-09-23T10:56:20.442963Z","last_seen":"2026-07-28T17:21:57.966794Z","times_seen":42,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-16.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.161Z","timestamp":1785259284161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yz0by918e-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIWZ%2B%2F4%2FdA8DEvBj2HmMWPu3XzA%2FEgc4UDLdwiiFg0u5AZ%2FS0%2FhO4zh8WQi7Wh2q5xBis8E3TtftkFfT1GX%2FGeHqNhJeKNWmLwvQjnhBhg8f8t40WhLSk7y4IC%2BhRGbrlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e095b56ae-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1598,"size_decoded":1791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-28T17:21:57.967661Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/logo-69c14cc3c95ca8.82142126.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.088Z","timestamp":1785259284088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69c14cc3c95ca8.82142126.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/logo-69c14cc3c95ca8.82142126.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c05sc-br\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6M%2BjqDhCOnC6K%2FZDUtaJYXEpXLkGZV09S3bEQ3Vv4mCdfMO5Vcn8u%2FfPS4VwQPIzBF9gi8lArFc2oB%2FEKeyw6Axlccckvjd9qt3GXOZBVzCTYCvi5ssbbz0Bge1YjKuOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5d892156ae-OSL\r\ncontent-length: 3334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7500,"size_decoded":4396,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68b7663543f09f05a195370bd47ade0d","sha1":"835f4b65f34a6484394077b9ea3fc2924ae54921","sha256":"273e5319e62f1363e86e0b40951e63ffe869d649db2636424844ebee5d3dd4e4","sha512":"90081f4de9e12cfb5a463bb10cec4d00307b6702a9d8d3f52c98ad502735141995d4495b4ca7db9cac26407963ff2df947504366ea2f26ad591de97f0ca235ac","ssdeep":"192:zhoY1sjL2d8DM+zFVBuCq5vH6RniUKb8Z6rZ4snj3o:mY1shM+pVECI6JnK+6l4s0","tlshash":"e4f1b6eeab705dc448cddbd7bf2210a96807a5b3da418e54c21c9f0d388283dae59d97","first_seen":"2026-03-29T06:05:12.874373Z","last_seen":"2026-07-28T17:21:57.968504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/tesla.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.127Z","timestamp":1785259284127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/tesla.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/tesla.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v8fcewx3dp\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPkw8w9%2BM9QuYKkGfqAw7N4iLamwqjOvY3O6%2B7V2sqrY6WuSK2ri3MDiKnIExg%2FygMVE4Hopl7o9NJnES9WXxLkLA%2FkUO27HqQglagqpJ9P2DRYJvhE2knaW%2FOGlwbk1Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd94056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4381,"size_decoded":5399,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4fc66546a87e45085fa2362825e00916","sha1":"a4546def9039c33482bfd2d88b200575ddedf2e7","sha256":"02ba74fca47c726038459562c3c5f2a118f2fa56cdb353a9f0a081e5a2e96599","sha512":"1bec6e28d2af2686f145061db119ba2bc685ace84554f23bb2e006cde5718ac3e96e4501d3b3751ff4696ede9b4965383d40a0fa5c41b55393a382d69d75b7ae","ssdeep":"96:g092tFhB60i3GscfYILvE96QrJVMTAPnIGVS9EyefX8JZtrd:xYPhc+fPvErrLOkfX8Jrrd","tlshash":"8c915da13d66c097f50eb4b74da11b2fbb04cd0aa92547b64891a457731f59b4825d30","first_seen":"2026-01-09T02:52:40.008577Z","last_seen":"2026-07-28T17:21:57.969428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/fruit-slots.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.845Z","timestamp":1785259291845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/fruit-slots.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/fruit-slots.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vdnhg9jf94\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pohAtuHNX9sDrgj1ZdOi2FBVc52oBKqzEeVLNeAEc4q%2FrFx5WIVSHkaw6jhWwINDLtYxDg%2BSHHfR%2F2N9iyNVw1aetmzb6YFQxsmPOAbKeam9hPWK7T7lP4GmXL21%2BbIVjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c2256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20779,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7ee516b38dd0dec84ae294d91fb81fb1","sha1":"c58518b0441891dbe8641ce21a9b7be1a88f21cd","sha256":"117883b5bb1d671aa59809f12c04be23e14524fccad5a18585df0e0e683f90e6","sha512":"f0853f7ac59631c8c1682e25487b067fd3c034b6021c70af0a06eb5b687e4495ef95fbfb23e1c77b3ce3b5ee98e4df24fa92a7972264e6752562805d6648a471","ssdeep":"384:BHcOmIVEsyNR8TN9ZIO9uxaIgSborxh0r+O17h5+vVp/zrN/X1Ye:ff/68hEcuP10h0X17h5+dp/zrNdJ","tlshash":"8f92d03952819a63cb0c0bb443d8a3f290e2dd45f5bb337d0979df815f852628a3f1a5","first_seen":"2026-07-28T17:21:57.971174Z","last_seen":"2026-07-28T17:21:57.971174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/moonshine.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.106Z","timestamp":1785259284106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/moonshine.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/moonshine.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vghw1i8r5v\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NK2M%2BDO2GhiMYnbckOFfITh1dy%2B1H06Bt8q0MfzT%2FraJPM2D2ADTConJH0zQjADAmIDO8rTEV%2FD1Z0y03soODnc1NZntM16pW7jYQV2w%2BSBZ9yyZfNWSoOwrECDoWxunfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35203,"size_decoded":36223,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"5a2bcd9cd5af7a839a78a9e6038036f4","sha1":"403b965ba9474b421cd7780edbb165ab0da8e4e7","sha256":"6953ea0de2e3fcad4f7c6a36a113121c67b7b237809326df21fc9805493c1af8","sha512":"73497bcf2bd0dae0cb243e0bcd026230b061575766857108e902b34210c7c4241dd1ea37d510967020dac7660a2efe217f17c82e1932546ee8ae076773d41575","ssdeep":"768:kd+HArb+WNh9IshufY00D2HUiM3QNKmA9dl/a5Cwh5:XgrlOtY090J3QNKR9C5C8","tlshash":"f9f2f12b0bec9d89c74c01b096150fb433b51f899fc290fb1db661bde8109560ec5a7e","first_seen":"2025-12-20T16:56:00.728506Z","last_seen":"2026-07-28T17:21:57.972975Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-14.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.159Z","timestamp":1785259284159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yz0by92nr-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Vi5ldBs6o4MAH7HLEl%2F27cResZjZh1Oo5%2Fho8RCwYiQgarYiGq%2BMVvKsuJgMZxH7S0Bd7ikwiUn5TApdkFzuNeIVEnv0W7Q1Tth%2BNkPmwSdAUWSChhIZX7Nr8bX3PvTGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e095956ae-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2410,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-28T17:21:57.973725Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/tycoons.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.803Z","timestamp":1785259298803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/tycoons.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/tycoons.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vit8r61nce\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOKG%2B6iAbzkO2QCAWu3LH2AfeQn946xbzdh1ynOvQGpLEhp6u3x8zFvxkRhr4cvphoR31LVoASwxRfPGEEh%2BosfD0GRbybxUy9IwZWq01L85PE45wKNe1sm3%2Ff4ifkpkWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98dd856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30254,"size_decoded":31259,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2b092deb06cf8020836b0783103778d0","sha1":"025d51e30d2ce28aa4b5b6bab4d8a6c00b184600","sha256":"7489603231463120566e86aa3488ee642c89d7cea164459d04a1f13f350a8eec","sha512":"c1d99ea533b5390c1a060e25e73577ad85382f67ff71f728b4240b9a7cd71a9d9715bc717f37547e7a61c6f9aefb1d4793468169148c31e982fe7fc9c0e71159","ssdeep":"768:lQe3ElTqHziyxy1wfu9CQvriVKxJSWoRLQdMRhZkX5+SPDgJ:pxHznxy16u9Pvrj3ndt5rDgJ","tlshash":"ccd2e0842bcab81cd82c077c8dd76b5a84a8947693380f9b67da4ac11bed4534fd0ec9","first_seen":"2026-03-29T06:05:12.909401Z","last_seen":"2026-07-28T17:21:57.974471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/runtime.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.083Z","timestamp":1785259284083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf72lpj1jl-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNMzjhP3Xw0xpCL58R355WT8H5Eq5YSLEztwUccwkaNLOIkwBDR2QAYPOwEc8HWo87LVJ3z1cmt5wMZJsDRKZnlEeyK7qYxi%2Fde6QN1J1jF%2Bg3h0OT8S6%2BCnMbZrXsGP2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258f5d891e56ae-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2001,"size_decoded":2067,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-28T17:21:57.977087Z","times_seen":136,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-10.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.153Z","timestamp":1785259284153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t29u-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=das6U7RdORb3EPSkNDkk9cd4s5NTrl9EPPe7ym7YezI%2BKQRjb%2FpQhW%2FE933%2ByfRiFOQlCyJzdxGPfGHu7stz9hdknZ70uAy%2Bqp47F2WcHH7mKiwqmLt%2BzdK27C41KJ1f1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95256ae-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-28T17:21:57.977855Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/18.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.176Z","timestamp":1785259284176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884y8t9122u3-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0bDqEsryKbkIu%2BBaqFvruG%2BxoSiOrd5GJ4NpIL6srDi3zQkATdtsoViGDCFGJvGhP4xOVyMaNAHJhS%2Frb6lN6wZtO75GUCTcK7Gr%2BknJVush%2BSo%2FaY7WkKZYtZAbjkiaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196756ae-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3675,"size_decoded":2247,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-28T17:21:57.97857Z","times_seen":89,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winner/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.331Z","timestamp":1785259291331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"904\",\"512\",\"153\",\"669\",\"186\",\"876\",\"938\",\"823\",\"811\",\"453\",\"929\",\"751\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:31 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fiwt6ePDcd1g9m8M3CE8SgBTCAjp7bFH6kILQ6C8wbWpJvpWJwD8LOsxAuxNAKegarT84kgSFjx2DfvUbNqVGIC9zfn0xUfhXI8XsRQTygWOUjzYJ7K4xSG6YpfE4bYToA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258f8adbfb56ae-OSL\r\ncontent-length: 220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":572,"size_decoded":1197,"mime_type":"application/json","magic":"JSON text data","md5":"f97eec8331a9e8fddc4729c6101f8036","sha1":"89b6718a865cf90b5e81de6d16e1f763fa834511","sha256":"2451f9fbb9c8da7a82a1d906da9fd3c89369ded563169cb0b59f558da9862f48","sha512":"12aca6920e84f6871e6d1302f4338105f2cb3fe4235e18a77915ea1ae2d489634b55dcff912146c876ec15ad75684aac7dcb219c4ca3cc8354c33c31d8cf142c","ssdeep":"","tlshash":"27f08c226a41a33ba58310e0dcb3efcd1058ec62652d8875fdbf5da2d3229541f9870c","first_seen":"2026-07-28T17:21:57.979273Z","last_seen":"2026-07-28T17:21:57.979273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/age-of-discovery.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.109Z","timestamp":1785259284109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/age-of-discovery.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/age-of-discovery.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v9cop6grrc\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaUPzWdldM688kRXazmQ2AxR%2FJHL%2FwLQEn18NXMiI2HxvQvy2UWoubTfhSSte%2BPcN4CQq035CUL1TK8%2FXEj4bHeAsNpOPF5TfT5BdCNt0RoKhImSqhDNPGTdpF8bMO%2BfYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35976,"size_decoded":37003,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3e4f17d34a5a81cecaf0903e8debf20c","sha1":"59b936192828120445c16b6cd1836c446016cdfa","sha256":"205e69d0d22abf5b7bcb23c44758fe5cfb0d24471e5296b3b4d65c694112fd4a","sha512":"5b206444c335aad95d2617c7c5c4ba2ec4aff8b395f081bf63e528edc0fb5f4f2b011602d8c16cb6608a0bfa22b3f1ac78dfb8cebd45e8acb3763d7b85f00e46","ssdeep":"768:L5TRwy5pCx0XEDq9KXyoIqtRos5b6e3rhgsz+yfn5/udDGGTts1IQB:t9wCCCXEm9KXyqtRogb6i+kn5/udDTMb","tlshash":"a7f2e12b3234c15ae2ec3b97e5dd0b39e0b191567e81016aa49461425ffdf21cac87ea","first_seen":"2026-02-02T10:45:14.613051Z","last_seen":"2026-07-28T17:21:57.980822Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/stickers.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.132Z","timestamp":1785259284132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/stickers.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/stickers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v8aky0p4db\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xpw%2BkGmQTR%2Bne9Kw1RFiGUSzc7PT7SyQyPoT9v0XFbzI5zFpCm18qFIf3Zq6xumsWrYQuKr5jygnhFze8%2BXyEK0twyBlUxEDKA%2FwR%2B5A%2ByjzrhdzQjYUswiTN%2F982tAfXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd94456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":6688,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"0f37c975d3fa590a16035cab99464334","sha1":"c7af0062918bfc66c0613d1a68c402a4ef07fcb4","sha256":"26f4b7dca1db4f89e07b41d5fdf9fbce81e241132caf0b2fbca61edb9b47a8b6","sha512":"e6eaf07e3716dccee4df9c1ec7c02a1da0dada2904292106b90266bcf09943c3f7119d9b710c80a3f15b234cf04d02108d0bb98ae8fb270955e3653e82b1cb67","ssdeep":"96:4+mq4ggl30tlzzb+aDYekrO7zwRybiX1+KBPT/XHHD1O6VQn3:4+t4Zl0PzbYeWRyeMw7PxO6Vq3","tlshash":"9ac17ea28b808a07dadc07f2d2d9f792b771c94da7424bc3dc54982c83ff1e25221409","first_seen":"2026-07-28T17:21:57.981552Z","last_seen":"2026-07-28T17:21:57.981552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-0.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.137Z","timestamp":1785259284137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t1bg-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rxis5NbgGcaW50O7y18jmpaPjfDx0ZEoTAypusnZtpC4BZ3wLD%2BjVckOerZP5LDaC7552cSnWNqgobPzQ4VnsVZnh%2FGwFyz9KBg1%2FxXzfbWpXfz1StTbxYzyoTQCk%2F%2BoHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94856ae-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1748,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-28T17:21:57.983866Z","times_seen":78,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-13.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.158Z","timestamp":1785259284158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yz0by9f1-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yj8l2DIc6zE7nBv4gK3GtFqJXfMfN8gdLLqGKzMafFTog%2F5iolYMaTHgcnOWvQB6DGxEUfLiylVP00lRM%2BBj5jn5We2Yl9WMOTIX9n6jLzSkhj0%2FOtsv7rStTllZwmNrxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95756ae-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-28T17:21:57.984678Z","times_seen":78,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/fire-hawk.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.793Z","timestamp":1785259298793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/fire-hawk.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/fire-hawk.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:38 GMT\r\netag: \"dha87vcq5600t9w\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omFF0wH4QRGUztXAnML8%2FUcpv1fkSG73UxKhUp4zxRwNC6laGt6mnUd25G4FldM8vB4SONg%2BwxEen72AVsb3LO20pqi6whd6Nd1NyL9t%2B2joIcwh3NkbWwEeeuvAeui4xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb97dd556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37940,"size_decoded":38947,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"92813b80bc401fde8586612628d21ccb","sha1":"e58685de4e4bb5a80773b01556336dc5ca5054b5","sha256":"753ade745452fbe634104cf430def60ccf385cf80c52b4acdb2489ece5d0750e","sha512":"3d495aef9473fb011411b033a88414121f0b305345d83ead82d5ee1193e74bbae10c9e4b8389f345c5fd28878cfd64e740222ed034ab02b62f499d1eacb5c988","ssdeep":"768:SKHG8RYNV7iZ5jFW+dDJCV1dSZgDve5E6Or0AyU:2G799iSZgDvvTHR","tlshash":"b903012a62e2d661e47c4671238a0507eb11f281f76abad9f9094f542337183732cf73","first_seen":"2026-07-16T11:27:37.652894Z","last_seen":"2026-07-28T17:21:57.985397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/crime-scene.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.808Z","timestamp":1785259298808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/crime-scene.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/crime-scene.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vbgw7hxiz4\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYy94pgvYS8eAQscGbTW%2FY7%2F4V0CeAn0jXyF0NGLlD9oh56X%2BATr5FECA06%2Bfa1SPFYONN480RfYnPhX2E%2FYJSb8VtmtREF8%2FkYZT3MgtQP2%2FAWyMwJ5Fz4pIWjDvWWu4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98ddc56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24592,"size_decoded":25609,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4b9446a48dd0f2f483c23a12e56e2bfa","sha1":"d6874f967ec51b57f04f13fd3e16623ba37da9a5","sha256":"6e28cfa7898faaa1543b31f5225bb23eda471825e622aba50b24048856dd139f","sha512":"12475a9cb184ca5e7cf7db8ca7d8059812755fb4a713395ab437280c8930a9b8e9da824bd1f874363be53c35aebe25d9a916cb5b839e6cd675247a442da27530","ssdeep":"768:UStdx2e0p29tsJVDxY8GuOAgiE7ZiQTFQngZ:7op29tkY8GRZiQhmgZ","tlshash":"a6b2e08016aec63fc942fbb745b60afb2a245f584b6f3f3c844e30690f165c6f4aa055","first_seen":"2025-12-20T16:56:02.004885Z","last_seen":"2026-07-28T17:21:57.986093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/blood.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.827Z","timestamp":1785259305827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/blood.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/blood.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vaesgc7kli\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FKuGdgIK8qfi%2F7jCVR0u9GfN8ok%2BMKlCo%2FVB9h3ecQT%2F4LP9e0at%2FT1CG4hk6vYpKfZkKTnmeBd1ScT7iBzUbhIzh69fUfxk3KcMvpux2o%2F6iYjw1RvLhivCNmV88aFkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26694,"size_decoded":27705,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b9c090d3c3ff1527198043d5c70ccc1a","sha1":"efa387dd50dd437f8e0d8935aa4efd90df9045e8","sha256":"1b423a26054d0911f41e27642ebe710700e2f0d93f3bc259b6fff5357925e090","sha512":"b8875bf9dd4b8ec89f14b5c70453f1009e97587c1799720f5e1e71f97eca9cd5fde8c3abf973840d6a500d6b95e8388508b6824ffb71a9da9d47e2b75c8a0334","ssdeep":"768:TgVvl1BXBbAajeteWB8y9rLSlFE4oGIR+WhTg:EFxNYt7B8y9rLSAFGCBg","tlshash":"4cc2e1a153d3cafce86a7a6392930085abd7a1c81156347b4ee9e874c398403c561ff7","first_seen":"2026-04-03T21:46:18.174631Z","last_seen":"2026-07-28T17:21:57.987011Z","times_seen":5,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/wild-egypt.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.846Z","timestamp":1785259291846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/wild-egypt.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/wild-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vj55felm7q\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4ZYu7Cwdp6mdMHlEF6fmDfcY%2BnJviwCRO9HXxqZ6aRHewl1J3n1ahvLCh8mk4iEPJs05QPKabwqpRchEefIGTBhIPIoNaBMxUvArC6UEcKiMx786mplSphjSKiypRHuPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c2356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28790,"size_decoded":29794,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d6a16c5f967b76dc2dfd06303b50f03c","sha1":"c5334cc38988ebab42650f44cca875376b667d02","sha256":"0a447b998d7eee1bb2ae9b1208185fd2069a9c054ceffe9275cdbf111f02a8c2","sha512":"135cb732ceb58e34c8e2960460f8e6a1d32878fd530bea076f2abf7eb315188165293f762e4aafe0d0dd64869e5fdae931fc65a19c2c08b3bd06392e638cde93","ssdeep":"768:s5+/hOpzv3/Co9rGkMfSAoHsF1XqpX3WxTTwkW0:s5+/YCoIk4SBHsF2iTS0","tlshash":"c9d2e17f1006f5dcc59c67730945ace88c1559d8a91d4c6123efb3583bfe9da08aa3e8","first_seen":"2026-07-28T17:21:57.989198Z","last_seen":"2026-07-28T17:21:57.989198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/wolf-gold.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:34.726Z","timestamp":1785259294726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/wolf-gold.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/wolf-gold.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:34 GMT\r\netag: \"dha87vjcamqxlmr\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsftPJrYtjC7UR0z%2FyVuvEXE%2Fekq4RJF5HwOU34hGcf6khSJgenfvgdgBvf%2FWY5aMoG2Dc2w8EjlHmL1GV2mMQsQEqu0c4gHag2%2Bz41TcVetyVxMiBa1vpr0JDFbZ%2FDY5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fa00cad56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28035,"size_decoded":29048,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"572a8e6ec5970139b781b68524787439","sha1":"a54d966ff5da0c92be7a90fbe9f4ddc3c3b5f8ef","sha256":"ee996a090fc2e5fcc1f55503818c2927dc258ab7a8c75244ed249e3b8464ab2e","sha512":"e4652a117181a022a772ff945dc9a4a7835bcf9f3613cb23521bbadd826334393e7af9ca1c0fb6123f87c12167eb295d26c493c013f83d33615346c72c97b7ce","ssdeep":"768:PotMNHuv+87dHaF2mRZqXYkbNq3hB/Wcfrw5yR:QtnQ0aZqXYkZUzRfr/R","tlshash":"21c2e14feab74f94fc7d05be46cd180185f92a611709497a36a088c8d79b278c4bb216","first_seen":"2025-11-17T14:13:19.298323Z","last_seen":"2026-07-28T17:21:57.990897Z","times_seen":4,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winning/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.330Z","timestamp":1785259298330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"521\",\"154\",\"2534\",\"324\",\"855\",\"1613\",\"1903\",\"1846\",\"2121\",\"1817\",\"1750\",\"1099\"],\"locale\":\"en-US\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:38 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLPULda8gzC1xmVNNPu6YV1Bc%2BuVifrscJTHYIaHJZTYywNnxIPy1xIAntgmM3QKjIl54tuY0a6SnMupgJwBXPFUSlLJAmazoso9KOu0niHGuPWQhvp7cBssMlcBsPzXcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258fb69daa56ae-OSL\r\ncontent-length: 541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7397,"size_decoded":1520,"mime_type":"application/json","magic":"JSON text data","md5":"1244101047331d5b68d7916842a7cfb2","sha1":"481e89161679f67f852f50f2d722d86e8a881d83","sha256":"641d89661b33dfb8e486e54d9697a45740f73a22f7930ee6279f46730bf46bcd","sha512":"75e1917428402fd9351cdfe9f6adfdff39feda17bc73ea40ef33558299a99a1ec9400c247a7a430ef892d1d45e86e91235672d6e6dc38e4a5d704e95be11dec2","ssdeep":"96:sf+fJf+fxf/fwfYlfgOfRfofM5fPfpzftfNf8fYfvf9f1fRfFf+UqfP:G6CG","tlshash":"ece14b066a62a23fb6d360e0cc73efde1454e972542d4128bdbf2993d3234245fc9a5e","first_seen":"2026-07-28T17:21:57.992709Z","last_seen":"2026-07-28T17:21:57.992709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/close_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.170Z","timestamp":1785259284170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yn3npp1ih-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2eW9tksLd3ikj9DFa2T8aC518A7O37lDNCfbUJkpEZDVsX%2B9UxFdsReigSHA4uiuczU1RN%2FqfZr3KJrutJtH12UcwMZENjzO2To3gCv%2BKeK4TtaG5ElNYQE6mWgqGilwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196356ae-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1872,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-28T17:21:57.994338Z","times_seen":91,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/gambling_therapy_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.173Z","timestamp":1785259284173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/gambling_therapy_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/gambling_therapy_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5taip-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tW%2BPMED2udFRxvuTDrmTqeT0WGFdlKfLoFU%2FkG0LJiMIHbjeJYMXhukJxLBPA4VL3o%2BW1KQ0a7E527CpInCdO1xMu5ZVpJaWlAw6kF8%2BTNrssf2TgVdylXVD9MZkcsPjvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196556ae-OSL\r\ncontent-length: 5576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13633,"size_decoded":6613,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c28a2ec537870b466539e977d126a642","sha1":"411fb06c13fece6d976e46adf4e1853f217e7dcb","sha256":"4dc1e85f5617c3e16712c08673aa0d62f148e3cd7927388fb07234e10f837978","sha512":"2c4523c09af461fa611146331221251e8ae5ede94f5d6553643be12c76d03acfbe144a2bc223dca00d734e22b18b41087a36c11169f773434cdf1da93c244e00","ssdeep":"192:eqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sBMZRN:eON5+E/VumjLMAzj3wB2H","tlshash":"5b52b5fab3d5b2e8e502e7f0e12584317faf34bbbba6c658c6842dd0e61100c5e658d5","first_seen":"2025-09-23T10:56:20.459959Z","last_seen":"2026-07-28T17:21:57.995112Z","times_seen":58,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/dmca.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.177Z","timestamp":1785259284177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yn3npp6v2-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKjhzMrY4hfCQ1G7wZJyPldbG7ONwkqxXHvAMSTuLgrEiNqktp%2Fz%2Bo8JRqMuFhlJbxfB9Wad5Mc41g09WN9UBXzFZixVu3QVYGVxyEFQEV8qlwQADZUV9fBb7vkjVoNoOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196856ae-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8894,"size_decoded":4572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-28T17:21:57.996955Z","times_seen":89,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/raging-rhino.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:29.069Z","timestamp":1785259289069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/raging-rhino.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/raging-rhino.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:29 GMT\r\netag: \"dha87vhaguvjozw\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4xNxDl8WZp9NCyBuFIDUm7936Uq8s%2F3O4L7zghcovcUaTYf5MAQliwKwHEc%2F2DhUpZsYP%2FYyhTh8ytM5ywB19K8gaZHUYs%2FuF%2B%2FgeKxy44kkohr5Jz5puCiqr6g48Cbyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f7cbb4356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32396,"size_decoded":33412,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"83441d0f400481fe099801b2744eb73f","sha1":"dd41f9335d1d2630906eb8fdac7d82c1bfd78687","sha256":"df82df77c7c4e0e73910270cb58b8e0d5dfee845f901e3a5abd83af3b757a1ef","sha512":"8c348ff8f00b74ca2d83c20ed8c271306902296107a873daff770069849b4b6ff2efafac968857db7d26aa2e3f2fc26c7a0c2e52cbae02d75a7766303bc66cc7","ssdeep":"768:z/RnrR7VKKQUcCw0OyJYyz/692p6vNMxcAscQL6YTWYa:zZnF3LRw0OBuS92Js/L7a","tlshash":"b9e2e119387b3ec2e77e2630f9ccb2a0b7e1dc10add699cd2a38750163d76409f64a19","first_seen":"2026-06-13T21:57:34.699391Z","last_seen":"2026-07-28T17:21:57.997674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winning/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.328Z","timestamp":1785259291328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\"],\"locale\":\"en-US\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:31 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrt9%2BU0JWS44XUrEP%2BtaVZHS8LmtDwxeLA0YFVqrp9cfAgpVUkz3D2osasOL6QsKm1Rs%2FPYNJTxo3dbDgGxHaNLiPAED2MZL7uU2RZBuiHCOZJ9fteHHF2%2B9I4ooymgW%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258f8acbf956ae-OSL\r\ncontent-length: 584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7486,"size_decoded":1571,"mime_type":"application/json","magic":"JSON text data","md5":"7a8e7bf56a0decbc459ea66aecadeb54","sha1":"7a4d69c502a3d1731f7c181a028e54e517eefa17","sha256":"fe4dc8f8fb55fc096ab17cc717c3ffa125dc9000c0abcd52825dc23f23ea97fd","sha512":"019831e5cfacf32652ededd1e7a063c9e15e5611d074f88835286068dcb68e84442ab949864baa5bb4faf5adc247b8a9a145a06f2ee5ed32247bec271650e511","ssdeep":"96:yfW7fKfdfCf1dfkfIfYfDfpf3fAf0f/f9kfrfBfbBfM9fdfMKfMfWfx:rbg","tlshash":"7ff16d066a62a23fb6c360e0cc73efce1454e972542d4128bdbf2993d7234245fc9a5e","first_seen":"2026-07-28T17:21:57.999321Z","last_seen":"2026-07-28T17:21:57.999321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/bush-telegraph.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.096Z","timestamp":1785259284096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/bush-telegraph.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/bush-telegraph.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vat2v0uwt7\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gkue4Ic9Jc3ZVeOeBguxOY%2Bgpcj2DGzqa1hfRxVmx4lxnMi9rEew%2BqGo0KeVn0dh0ZmPq1O68jZIcF69EYs7tPnc6ZXFVrXP6%2FTDAsRSXWzoe0db1RHRpk2LUsRwYGv6Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5d992856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42523,"size_decoded":43544,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"44efa404efb716e3ddf4ff817400764a","sha1":"80fec81d6f8ab798ee9baf98148258ef73c9b5cd","sha256":"fcfb52e81debbeb1ad2fc5a44cdc1339ba23461cf6c3744dffea17472a107c40","sha512":"c9d23bdf6e086fad8116462a9b07ea40cc778b4975c21231945d77525bdaee3f777be563a37522bf8e0f4e5d17a2965c9cc9e6a088f65be4228a93637f5d6b82","ssdeep":"768:denzKI8tD4bhHBxctwzm5ML2nivhYXbP36QKlK9NXgra/h/P:d0KI8h4bbxzm5uvGzPlCO/h/P","tlshash":"7113f1eb33390522f25f79967f588522c5a0d1a6485ccc529cc11f1899e70eefad5217","first_seen":"2026-02-04T18:36:07.406635Z","last_seen":"2026-07-28T17:21:58.001134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-3.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.142Z","timestamp":1785259284142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884z65jak11j-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMQd6PVYgoIKEVV3Itm2%2BFmBu%2B5gZelAlTQY0PSx9rYHPQX2dfVmBXNSpSHyYnomnXpFmAimWMojjvwKArq%2BNC0EfxjcoeV2bpBEc2yBsqJYER9e5G3oyXXDdNkYHVtsUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94b56ae-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1351,"size_decoded":1725,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-28T17:21:58.003879Z","times_seen":78,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/manic.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.791Z","timestamp":1785259291791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/manic.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/manic.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87v78h6uy4c2\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBuMUfh3YtHEOlKwxkw99MBF%2BCHWIrAGLeDdTSgQw2cz8Pvfb3VpmugAqfBeJyg2%2FBD%2BQSicIkECMhWzn68MWAorYmWUZDr1DKxA7gWpP8fyWrUv%2BEHUtxHJOinmMN8xhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8dbc1b56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5618,"size_decoded":6625,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ff8de383e62d427631c2e8b95e7e205c","sha1":"827938d52437f24f03012cfa977d02b2de5b6321","sha256":"0f9b6c314b1f29195141dc84ad7c516b304ca6b5ceae9df757ad84663f08c1db","sha512":"80eb62b1b2ed6f41d7f9d22c05f3d6866dbe823eabea30f4b7f55dc069442b0659ba5bc770555b419fc935403a79696340a8fd3576c540df8d9eea61a0fe0762","ssdeep":"96:LQrF/xTQAi92TG/46HRqCyxX7mmcjc7ZdOtRAO4b7xOd7gB0Y:LQ/YkTG/RMC29sCZotRATb7xS76","tlshash":"68c16e277f29a90fdc9eb53b50d5c46a2f11d6848651cbcd1a036b5ca77f2ca67b0100","first_seen":"2026-01-01T08:17:55.674048Z","last_seen":"2026-07-28T17:21:58.004671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/legacy-of-dead.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.820Z","timestamp":1785259305820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/legacy-of-dead.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/legacy-of-dead.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\netag: \"dha87vfmxhosn77\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8kwHurhhpdk5Ee5MjNiK5xwzATR8EwhCa0HBIm8maSytNQM1CTp4Sra1LMGBDPCgmHBnI%2FCiLgqTCd2SV5RP2ziFnu5ed4gyr2ZDHQa0Sw2gI7ZSP5RhGXv3ymCW9by1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30067,"size_decoded":31075,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"74abf1cea8f61f98753305ca04a0c432","sha1":"576819843f0fe35b3c166841c3c43044820c3f92","sha256":"b23113b24e4f0003e8177768869f50da0e97e35b2570e48f8e9110326be0a737","sha512":"fd719dd0ec2345ce47d381fdc5f818c53b8621e4ed7dc6ca8e8773b77e766d2bf234a89b932a164349affbf75e1e6982d905a85ff7f11b381f83a90906af4f93","ssdeep":"768:8XVeh0u7syD/ocNuzsaumaN/2SXTL4l1+c2R5BvdrmQR3f:Aw75DAcNssRdN/2eTLGQc2zBMw","tlshash":"ccd2e1d213f3da72ce4e2bb06151ae928b714ea4957ad70491d0ad3e33d35b1a897c33","first_seen":"2026-07-28T17:21:58.006851Z","last_seen":"2026-07-28T17:21:58.006851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/the-golden-owl-of-athena.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:46.753Z","timestamp":1785259306753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/the-golden-owl-of-athena.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/the-golden-owl-of-athena.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:47 GMT\r\netag: \"dha87vieychetjz\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkUE9wCk6UB3JkNfv8Vljz%2BtqgqIEPGlj01stqss%2BU3El3RLy3qacv0sjGnSohLzvcuYHVOKgN1HpBTDbUV3Z%2BicV4O4BDSdowqxa35Ip0MRir0Q%2BFrWm03qMOJWk0xh8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258feb3fa956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38303,"size_decoded":39327,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"4e6ea883248f115e2f09b8755878076c","sha1":"4815800eced1e4fe66fa50fc56e3f4e34c471ed8","sha256":"02adfde1e64719edc5501a08ec5ab1023786e3314a355875de9ee13605e92286","sha512":"520d885bda8fc79b41fc3ecbd8930b97f0d64b2475dcce190363bfe9a272f974aa6aad0eb27c3fccb54d400d8188d23e8ebd5c05689ad9b0fcb45b17e9f647b4","ssdeep":"768:X3x6Oo25/wGTVA/awJGZ98UxoRVFaHMz1hoHfX7dX118oAkYy0MORm2Q:X3x6p25/HpAY98kEFaHMxILdZVes2Q","tlshash":"0203f1ff7b620f5afb7b09881179038811def9aab0619f88e4395359a37b8414479d33","first_seen":"2026-05-18T23:51:30.805602Z","last_seen":"2026-07-28T17:21:58.008701Z","times_seen":4,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/hot-honey-22.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.113Z","timestamp":1785259284113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/hot-honey-22.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/hot-honey-22.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87ven7gz6e56\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OksdVIf94H8ZPxDRpc4qlaH5OQm3TNhPIvC9yKtlytOHAi3vStJ%2FFVmXWQgnRwX7bxoERllzsilXj6fAg6UfI2xohbABRYWveVeBWMjkO%2FBGJYSTFtmrcwBLj%2B3DXCxCvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18330,"size_decoded":19349,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"03350f981976eb17cf32fc9fdfc0fe42","sha1":"6b7d3583996bf2794345416cd7e0c9feb2a68ea8","sha256":"c04b2e8767d8a7b7b449f2602a100412a2a2b5e4b332919b6b653897c2d00810","sha512":"300418fb61f41c6d27e437dcd60fed5e8ca7e5028b0a4d0198bae6b990848c7990ced2dcb5c181d817790051a5a75de983fae4890590e40f75fef6a40c482892","ssdeep":"384:v8tvHUrtxm+hd7vXTvV/g8HR4CiLzcycB7McQsX8C:4/sEsrXTvVY49incyYVxXx","tlshash":"a682d06b83b08571fc5f01b18a3842707a249b61774267f765b9a7694b2ca23dff08d2","first_seen":"2026-04-10T10:02:45.679742Z","last_seen":"2026-07-28T17:21:58.009441Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winner/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.334Z","timestamp":1785259298334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"142\",\"904\",\"512\",\"153\",\"669\",\"186\",\"876\",\"938\",\"823\",\"811\",\"453\",\"929\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:38 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMAjrV4I0n6GH6hN%2FT6HhNpAwGOTAOtXZesqExyh%2BsB%2FaFoMEwdNYJIBQ5pDHUV00OvgqgkY7Ah357ID79qeyNqsQVNJV3MOb1enlkQ02z3tuhwDpONIC8W04c99tsGqfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258fb69dab56ae-OSL\r\ncontent-length: 224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":1207,"mime_type":"application/json","magic":"JSON text data","md5":"7cf983dcf75e55592978c8c0a6f8c585","sha1":"51f0d0afec4440b587ca448740a6473d6ecd82ec","sha256":"587d65f6e28e88a5a2f5e4414b118127d530c639256703cd0de03f8b1875e32f","sha512":"a7858725ca1c7d44932f93de5a66e013cb025cad7cc4362aa1d7978b98f297cf072e478f7ab2bb56ab6d8167475aec922f164c2277082247d345c3c7495daf32","ssdeep":"","tlshash":"b4f082227681a33ba58311e0ccb7efcd5044e962556d8474fd7f1992d3224542f8870c","first_seen":"2026-07-28T17:21:58.01012Z","last_seen":"2026-07-28T17:21:58.01012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/barnstormer-bucks.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.818Z","timestamp":1785259305818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/barnstormer-bucks.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/barnstormer-bucks.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87v9y4b7fq1g\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkhrVf4RrHYe2lOg6EaiUQOL0wOCsH%2FW41q5%2Fhhh%2F26tbZBuKqKu1LIflbCjL6wAHSO4tTTWhscibFnCQ%2Fw3TGX97jQRUepzhujMzl3MM9InFaavJCrn6MLkSCT6u7xsbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe55f7356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33748,"size_decoded":34765,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4b8d873c442bb4b189b56196762c9623","sha1":"6008f98dd7759220c8554cf805650745bed0bcb8","sha256":"e4dc26fc7a180a345b45e771b57b3ed49ce1ff66ec6610b5f145435380519a0b","sha512":"6d9e27107f3575f0fb877178ca63a60851bff6be4951a81c8722ee714b9cfc5e54dae989ff42510a35d0370373734f299706daa80c1f9ab2f20bab068887a931","ssdeep":"384:3ULi6VdHz/jgELAJzhM3WYFOEOnEbsXl7t0KIZg81zR33ve/6Q/ii9LL3AfOGz30:3aVV81NEUEHVhZGCQ/iiV54Ock","tlshash":"29e2e1fe8b201867e3cc6409964c27f48a4e251ad1727eb10ebd3af9777ca893177254","first_seen":"2026-05-02T07:27:26.273132Z","last_seen":"2026-07-28T17:21:58.011526Z","times_seen":4,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/butterfly-classic.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.828Z","timestamp":1785259305828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/butterfly-classic.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/butterfly-classic.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vat2v0uq6y\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1JRf92iFe%2BWWYgc5v9MSyAhjcJ91zS3bTaLtlvyOklaqsxRP8CqjEzlV5lqHZPNbmVlz7OQM2vWyl1uADDXeUZ9fi4hT9XKw%2FhAlrmNDfh%2BO12scmnzVOBycX2vauTMHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7a56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33946,"size_decoded":34961,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d53352ae8d8d4ee1b4f4474d35e969ee","sha1":"5c26cd4f8cac46c0988f6ef08b4e56d3303d3295","sha256":"22998473881cbba8d8cdfe4c468443568e3e9576c59b03997d7a35736cb7c789","sha512":"51cb1dcd398f4c0aff3c2dd7e930c0581eb087044b6de2a54f9cb5e4d373474a03a85bc4653978aa00be131fc9eb6c57e53e1c443c9f3776fcb059752e8b029b","ssdeep":"384:tlMcHsRfFaJrfwtGoB21PNQGIUIUYUpHAnbxJMk9IMMQH0NFv/qr1TtE3l6mBSC0:cRdaJrfwic9Uf6b9qQBTty6mK60/Jer8","tlshash":"20e2e10dcbb79968a54f64c23629750ea223d253961cec72340cbe0987be74d7e7b139","first_seen":"2026-07-08T10:52:34.946708Z","last_seen":"2026-07-28T17:21:58.012241Z","times_seen":5,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/micah.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.117Z","timestamp":1785259284117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/micah.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/micah.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v7auxb236q\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJes6SVadiXYdE04%2FmFdhVKWR9LAxwL4g20bqGN0xJlz7CuRVP%2BUk3s%2F1QoGH%2FGOSQvIR2QKu2LYpb8LtBnSdftrKfBjmosYrg9j%2FEp5rfrR7J5ptrt9%2BbJkdyHMCg3arw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4130,"size_decoded":5150,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 1","md5":"d5bfbb24762cfd9140300b5c0c027574","sha1":"3bd14469fae8b7f873dbcab69b85aa5f465351dd","sha256":"3e93c561687b36127fe4dc8de18720e67f4e5af8ece61bbf7a329348d96d3a85","sha512":"9f5ac4ff2092764ae10a9ff955dbebac943728fd8c99db80add0d0b87e9051a5eaec51f6ea24a2b5b1b34757198c82fccd8ff3ea51ea29042884a2d1619b1116","ssdeep":"96:BBnrZhA5zZioIYhpRDGNnDug2Q3kKVZvZsaMYK:B1TqzbGlDr2Q0KvZs7","tlshash":"8e817dbcf33c64a18dd5e77435d07d090bb44e101422abfa41384c10aff5aeb4545615","first_seen":"2026-07-16T04:01:52.333121Z","last_seen":"2026-07-28T17:21:58.012973Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/boomerang-bonanza.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.850Z","timestamp":1785259291850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/boomerang-bonanza.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/boomerang-bonanza.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87valxnoip9k\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuMbfrEZkoBtRo0S8NlmkDiANArk%2BbjE%2BIUFqC0qCPiboWTQS4Qz55eoEFteiLZQza6NF%2BVrcmBcFEWS8lkDhjQ%2FUaM3mB8QTM9W3R3H8wArIbJQrHlUoJSHnJA24GGE%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e1c2556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32744,"size_decoded":33763,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0579e4e2d3d714dccab9102cb242fb30","sha1":"565a2b2f1cf7b4a9d4ab269d04ee92a01e6a9b0c","sha256":"f828247e6d529c94a73ee48b1c12c8615b7f5964f1c4c7caab178941fa22c6c6","sha512":"e209ce0c80cf073f25dc0b8f01b911f51f3325c2681633045e40ab776e5206eb857d04b0904b3db8826e6deee447f15c93e0824b4b2b93a51f1ed5400dfb4e72","ssdeep":"768:H3Y273NxxWPst8nabWxIlQdMOEvju8tN6tlDnaQRl9:IQ3rxht8a69avjl7eDnR9","tlshash":"f7e2f1028b074dd2fa3ea1ab57caabe776c54704f6b03f1611010d8b8f2a14352f9e78","first_seen":"2026-07-23T03:06:57.070977Z","last_seen":"2026-07-28T17:21:58.013627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.081Z","timestamp":1785259284081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 30 Jul 2026 17:21:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8Xk5FqpFyubme8WCRRTCtewtQ%2F47sMB6yvmGtJ%2FGD5hr40UNNRBga4StK9%2BKB%2F3avsUEYy1zPcO726VCnxeTeyXxbBgXq8S4uavxdcIkfSIfZbrifD%2FeE%2BaXTqjHVt8hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\nserver: cloudflare\r\ncf-ray: a2258f5d891d56ae-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T19:57:12.658106Z","times_seen":409954,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-11.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.155Z","timestamp":1785259284155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yrv4lxi6-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4lTPZKSz8gMXXAyJScMGmwEYSz8Le2gDzA%2BMch3PclDBb7o9mXtdfv3NYTxRZ4pdKMtKcdzufN7qPr9cB5UjQ16me%2BpkbzE4nZyUGUN16t%2F0gIa6BmKy69zx%2FTYrbdeoMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95456ae-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-28T17:21:58.015807Z","times_seen":78,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-17.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.162Z","timestamp":1785259284162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yz0by92dl-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWN1LKXnRMKpGKZE4xu6XAVu8CKUI24IrBBlmmUFnlWbCRSuHJigJ0C2PBa9UTPZwQxcHh3HEcGxZ8EUApT5KGTS5uQGiLNUWP5uzQkwbOQXhanfUfkGtxxc1Eik86fbOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e095c56ae-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":2383,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-28T17:21:58.016479Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:33.335Z","timestamp":1785259293335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:33 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sl8R3%2FZLLR%2FeyhWRh2C5%2FAiLNY0uUl9CWV33BY90hfMwNWQhDUtRxNny5j1raY1dYctPA9UcBjCljHEMKFSEMO4AbZ8TD7MU7TMj0ig0SO4dW266K1D7WIEmdq2AAJSz6g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258f975c6b56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78,"size_decoded":1029,"mime_type":"application/json","magic":"JSON text data","md5":"17c6fe1e2bcaae4d1d5589a20bbc272e","sha1":"7ec8839726793045e77e1b5589f4e33a9075a5b6","sha256":"15dc358d350c38e2a3862da554f39c0fa5508cedabdbfae491af57a263240086","sha512":"a8c95f768b27c2be85ec50c8ac6c6cc0c73596b9c89b3a71ed5a59f27cbd658fcf7c2d032aeb3274e9a94ed9574359c5b1c89d03f0acffef0f78b6e99dc8ada1","ssdeep":"","tlshash":"8ca022ca8c0fa88f2b330c000a0b32c020202f8300e08e002b80ccc20ab00023023cc0","first_seen":"2025-11-17T14:13:19.275432Z","last_seen":"2026-07-28T17:21:58.017182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/gladiator.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:37.710Z","timestamp":1785259297710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/gladiator.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/gladiator.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:37 GMT\r\netag: \"dha87vdx0e1zk86\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8O2Ous9FBFfnaxopQhaHz1bpmea3xehk3tX0yUyxf5dlDcLGf%2BdWobuph73BvLfYui%2FGu54ndOJ05VyVoFlwyfgWjxBU49Vz%2BzEThGSOdZahZx%2BHao9gtoyN%2BuxNfzQiaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb2bd8c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26214,"size_decoded":27225,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"3ed9c39c1e7f64784d8c340643531f02","sha1":"3e4a3938a3c41c3ba38a1a57984737101ce7d2c7","sha256":"9071b23e441d40e7130ff27e362b9600a0935f5c14ebf06fd25c2b777d4745ee","sha512":"fdc19927180c9a5f72fdaddc9fe54bbb4197df88c7212237b8e088d682b34d0c57b9f88b78a11a9ef380e4b83a2362bdf9206e7a40ed3431b1537defecb19618","ssdeep":"768:1lf1aFvlq979Ud+kabE9yg6t2TZUgbNQFf7:h4vlq9a+kJ02dUgxQl7","tlshash":"34c2e1035f201e1ce9ed6d3e1e8458f6674ea7989a330629bb305b677b1915f83c2a70","first_seen":"2025-11-01T04:33:33.194154Z","last_seen":"2026-07-28T17:21:58.018663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/hotline.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.806Z","timestamp":1785259298806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/hotline.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/hotline.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vepl7fajtb\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlrgFNgkuUdUWBu%2B0yv5FbkbSPN0aii9Zm2wuSKrinNdUE5aN0jyoRk46Fohk3nyhgIgvu0sSN%2BF%2FfKyLGfBjxv52PhTTuPYRb3jPNOYB4Fj8Lb%2B4%2BcLeRYEEu6n6zYLfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98dda56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25679,"size_decoded":26688,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f34f40f8144f60fe7d22e147aec27c37","sha1":"ff98dadafdf3dcfe5bb16b8bdf8072cc235cca7a","sha256":"54b4d3a0b84d6e2c43b4ad619c79ff0f290dc00ede28b2eb51a3824e6eeb9591","sha512":"775640eea5bfcfc7d4920a1989fec477933c01760862a94e1345f32ae0fe6bbc51eb15c4841ce54b994316011e7d7120fefce21f7e942a3047dcf53cd435a3ae","ssdeep":"768:KHPylPMe8X+NFhucFV+LKQuk6yYe7WgrB:YylPMeA+NxX+ZuTDe7trB","tlshash":"63b2e1a2375ed014d4bcc63c6f6e67d3f4c88e8d2d6e514e948443b71a311b91bcb166","first_seen":"2025-11-01T04:33:33.194987Z","last_seen":"2026-07-28T17:21:58.020317Z","times_seen":6,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/chilli-fiesta.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.825Z","timestamp":1785259305825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/chilli-fiesta.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/chilli-fiesta.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vb4zj9esh5\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHqFDkioRnTcGTNjd4Qy890bHrKOICKnOqdrdsrq6holhm0BsPEstzd1YZViumb14XKjRUIAdQmyHXmRHlXqjf3VOIw0gdFhADRhENOdksPNW%2Be7qLDiPkGBFAZEpNfhjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36905,"size_decoded":37912,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c8b64fbd3aa53768b8cdfe3f6e39cff4","sha1":"e4416d8fc24fe4dde3291fd489f515842a1f5c0f","sha256":"08b17309a8160525e0a93c7694d315554060e48c8ecc3f75bf867150d3802b42","sha512":"a44a2b61d85a694fe177c7e8a430670e2af25f0bbfcec6fbe69ea2805cfee6f78be60b2b86505ee3b7671989397bbc31f3d430d297cb8a9c1612aa1408209b73","ssdeep":"768:yUu65+gn5Py+hmMDW1HQD2twEOSP0drKgq2L1ydUSDxcS:yUuI+gnBdwfpQ6twZVKgq2LgJVcS","tlshash":"f8f20240d42444cff4bf166be96cbb9e6e0d29093b2a1b23a9de065c1f082150ddbe92","first_seen":"2026-02-01T01:43:13.99862Z","last_seen":"2026-07-28T17:21:58.022373Z","times_seen":3,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-4.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.143Z","timestamp":1785259284143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zax06s19b-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elJaoWZor0SV%2FVJWpkaCKgl2k2TqmAQ1eFeA3XZL9rgJvc%2FBwuz9UHWOzcmXygD52ivEiaaLkxE0sWCHjDRVOcKaAUPJ58LQkGY3EGz71LgrK7xlSTu4snjEx0WhMFyTCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94c56ae-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1631,"size_decoded":1789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-28T17:21:58.024335Z","times_seen":78,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-9.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.150Z","timestamp":1785259284150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884zfoh3016g-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwm7iBYOYCD9L8RTDWzS%2B5m%2FXJY4W65E6rwoIz24gCUK7iZHDDTIp4JEd7HQYOBvFAdczrCVKxbqM7TwYEKi3oCtg1AGNZ8coQRkg3XiQ5omtcqlXV3Adh4AWm%2FaER6x7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95156ae-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":1565,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-28T17:21:58.025063Z","times_seen":78,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/2.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.163Z","timestamp":1785259284163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t17d-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XC6DEf%2BEtsoWI4a%2FgUsD2%2BOqTa0aQRVrK7x9cq11gyDGaO2%2FAeNNLiEtbC%2ByVl9xIdrIlxQS51htNnKNBC1aoxLI%2FR1uRIPTEXMfQJvd9%2FKr03NT2JI4tlANqszhVqCj3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e095d56ae-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-28T17:21:58.02573Z","times_seen":90,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/favicon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.603Z","timestamp":1785259284603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zfZ%2B37xORne462RS5DhWEg%2FVLYX4KrxU95makESagDjE3%2FQBIQdVQu3VXs23mDkXBZKkPJWFtjYmVjTNsTwmbaEC4iqT1cou3mhIok%2BoHYVCT9p9jjgp3WZtd7G4cQLAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2258f60c99f56ae-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1611,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-28T17:21:58.026437Z","times_seen":30,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/playboy.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.848Z","timestamp":1785259291848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/playboy.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/playboy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vh3bnj74el\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aO7Qnse1JuVF%2BSGMw3YuPdLcWZzzG9DIRYnA8DH3HpvS38YoQtDyeBsvAi47PVGOV4fcFP%2BK1CI6s5okKF5L7jB4HEzZw%2FN5n5rkXIwCJ5whqOCpLoMESyhx%2FuNSTMs0jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c2456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5709,"size_decoded":5873,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"f64a9698c8533936479578a0f4ceb547","sha1":"00292ff1a036332061260a22320fc8a460502ba1","sha256":"440f4b4597226719b50f3575602687e50e628ae3b86c33cd2d87062f96278169","sha512":"d982bbbe8711ce90287f845f7dd175a78fa24b55ef69ef5cbfa39aee31e0ab4b2d884b3df727e35e87ee2f605ced54577f3c5d093de7c0ba68e40d497439ad23","ssdeep":"96:hne2PvQgTrAkztf6xWxRda3pq2uci+Qus4tFoeHsAj85mEYsxwT3:heYQgTrAkz1sW/GYf+ps4tFwAj8pa7","tlshash":"69c18cec8785c176d0fc667f281b4f623d25c921bf245aa771eb3e232412342dc811a1","first_seen":"2026-07-15T03:08:00.251587Z","last_seen":"2026-07-28T17:21:58.02712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/taboo.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.101Z","timestamp":1785259284101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/taboo.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/taboo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87via6vl6eut\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LrkKippq1EwnLRQjOtnFlCrhAOU3h1XmMY3wdzyeKAXNmKkhnHh%2F8OQ8f5pqoIhQyA7w%2FXyHMt0GleMNnRwv%2Bs48x5NrK02KcdK2he6%2F0XyHsLrBjh5RXij%2B7oisjOLqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5da92c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19253,"size_decoded":20269,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"291e507dec379ec584f945cfd0fc4282","sha1":"ea1a6a90d2bfd11cf7a372c9de4fc49bed260ace","sha256":"8850fbc6d47f9f9666baa1dfe12366e05c1995c4d0254870686d83a4964d063f","sha512":"cfe1941721c06880e4c9706a1bafa8ca7706421ee15ee709b46be27281a99fe72a8b6673a6c5c97ae8014ad2687f9b4e102e278bbcc057b2a956f3acfb318d3d","ssdeep":"384:4FxECHblAGSdAyESn9yBnOMD7uA6kZmnrRqhvz++KTbHS:iEyAGEcS94ufrRqhvz++OHS","tlshash":"2982c16c9b027d63c45d4639896487fe3b1654dad2cb1567de448f2de33cd82409f253","first_seen":"2026-06-14T07:59:02.161878Z","last_seen":"2026-07-28T17:21:58.029874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/kawaii-kitty.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.110Z","timestamp":1785259284110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/kawaii-kitty.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/kawaii-kitty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vfb0tg8lpw\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3g5WSslE%2Fqbf8%2BgeKpkmK4QT%2B95X0DSwjRNf7tNvBI7jZu7WwOXET0oVsBX98srY1KEk0LWfT3Hh7Ros%2FNeDAh8z2clxzOvbP310O75UgGUyD5c9mvieWwoFfgjAqUYaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28148,"size_decoded":29169,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d14661ed6379fbe84fda696814ada975","sha1":"4951402f93f6111d963ea2cf52b1844a0bfd44d6","sha256":"354eff76110cbf515a9fd36cbd728ff7e840b5ec52494f480840e81d2f58033e","sha512":"2678ffe4a277b549bb19307303739122ebf52d7473bee8b37c8dd40cd10191a0fa1f90530c3a8d07d7351815517910683d2c867fd7741137912ec40895517681","ssdeep":"768:lYxZt0ecrT3p//tFne6KpDPU+s4WR/cYcAwSL:CZt0LgbDPRs5L3wSL","tlshash":"a8c2d0769e27854bd69e0a71e2c063207bad80399a5d877e7c6b146f3f3d02b0589d0f","first_seen":"2026-02-01T01:43:14.085929Z","last_seen":"2026-07-28T17:21:58.03175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/cool-whip.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.119Z","timestamp":1785259284119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/cool-whip.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/cool-whip.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v63zp94670\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyjB54b7o3OFvwWrHptNqNTLLeSu89WbkDST0KxIkponQQpLXhrdozASIEqmLKs2O5D%2FucFDCpBL5ZhxAPuma0l3TOg9CSuPq6BFoYJAfVe44UPG9af7kb3TXJkssgX%2BUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dc93a56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8028,"size_decoded":9044,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"64911149772736250a961ea2d1246951","sha1":"7c1d7091cf8db1036c5d27d81bdd0632f80a7277","sha256":"0493462b6e05a766ed3c5ce187c14a33cdccf1348535a8dd05bd20c5513e4677","sha512":"36624042c831ec68f9599d00873aed30a0b29fb33ef9d86e47f822f4184046dbd36a28e62bf37527f0ca62f5e3b39cf8417eabadaabfddf78cc0b4c5fa77eccc","ssdeep":"192:6sy9MCFniRAR7n6iqLnRu8zZJle4IibvCXwv8xC5Go:vyzFiu7n6i4nY8z/h3z6wD5x","tlshash":"1cf18db8a638304bf9be49b1605da3d8e3a1503074f53897daac7f510b6a3863c94796","first_seen":"2026-05-01T23:27:36.605265Z","last_seen":"2026-07-28T17:21:58.035877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/russian-vodka.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.129Z","timestamp":1785259284129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/russian-vodka.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/russian-vodka.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v7yo9s667m\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHGcQZ5j4OPWQropUUgrXbpvtmr56db6Fc%2FKYhJacOvnr5CO3UadvOynqjaq6koNGKj3SMjkZBk8zKpWBNpn2X7AJF1FhWeN%2BAawI7DpBWZIUrY%2FX%2FtGTzHXTqj6TjKpbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd94256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8050,"size_decoded":9076,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"6f6864906fd6a27be13d230327580252","sha1":"b0cc7adcf3a6002a41d5d209a822d8f840dcafaa","sha256":"41be26a4e9d9b4e9a911f31e12151e972be8b78540ddfc6b019e91b8661784cf","sha512":"8b021aac2f55d0a5e4bd8055e2c7f59b483356f03481d2fd370bf262e7a36e54d5a12fc66e26ee0148f2ef7ae11e3770b8767ae5eaeaf3e408f10210db756f7d","ssdeep":"192:6IqrhKHZ40uP5Qk+1eeX4byDLhDGt2Iu/C:6rMH2P5QhXsyFibd","tlshash":"c5f18e620f66df77d52e6dbfc0cb021096221d15a0d2158bab9247215ba15bad750cf3","first_seen":"2025-12-21T05:00:13.798003Z","last_seen":"2026-07-28T17:21:58.038108Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/3.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.167Z","timestamp":1785259284167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t11l-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4Dec959PmaotrcGAL5Qn%2ByC4qPL1qZJ%2BS86J9E21OfMUCnCycVpj52R1vQvvTmiaYKV7aqJgZJeM8hiWeycxvirKw7TbpeAJDemHg8wJiFMeQKmjjBBjby1%2B6GmyeTmLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e096156ae-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-28T17:21:58.040907Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:39.335Z","timestamp":1785259299335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mAAQ4%2FKOvsdnHYY%2Fo6mp6Tj2kouHJBM6qBwMoOHHmdSNp0O472t5su7NFqL4mBrYfCpL5t1%2F7Jm4KXtNBiF5wgKJeR8%2B0yRyDFqPARjdnt24E2VkMPk4OuPbHS5759dZmA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258fbcddfb56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"b4a2ccaed90bf0621d374d20ed06fe66","sha1":"c60f2a68f6024b73eb0a3708b9e6f2925cbe2c64","sha256":"257efe2130954106395f914156cb6ed7596a993e7f65ac7ce9d66bb63fce186f","sha512":"a8da3828b825b7044cacc5ea99dc38460bd2df407944f3f03f96b9deeeb93c308abfca4ed3d667b9f3db8add8da5ece8bc0ee39388ea9351a22fb1b2e8ed232a","ssdeep":"","tlshash":"baa022cb880088cb02f3020c0c0fb0f8e0380ec320e808302380fcf30c2020a0203ca8","first_seen":"2026-07-28T17:21:58.042905Z","last_seen":"2026-07-28T17:21:58.042905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/coyote-cash.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.829Z","timestamp":1785259305829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/coyote-cash.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/coyote-cash.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vbeih1tvvf\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3SR4RjtRyLeL1rUJpNcnxIlDCaErco6pOGN1my8NXoAIazC2SD%2FmijshssNK%2BybhAshRT48kOoVnzbJVr7ob%2BAkeh6WxImUcThcs9zHxAMA2kaF2f%2FfJ7FD86uWvnZifA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe57f7b56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41307,"size_decoded":42320,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"776dd5d8c9d8b8887889cadfeb5c1adc","sha1":"2c3a940600adeef9d4639b31ee19d2b3d3f70fd8","sha256":"ea045a1b2b466702cb06d105a60c26556400a72f333c1a4eb77b994124b2657e","sha512":"f6a8aeefe08d58b7736cb3879a51010c04df21e7d1f5367a1d6b6aed176e5b2d087fcab9375021f7ad5dd38f0ffe90bb9ae4d637ab2edadf05ac3b8c4d698119","ssdeep":"768:cexAeFHLqFk/24R69NoMQjcQR7sIG4oBVkhSEhWxXL7x:csvlLqg2Y6xJKV0VkQEkVx","tlshash":"3d03f19d3143c9abfefe6fe01b102793c1bf594eb582151955d2c499a324f41683b32b","first_seen":"2026-03-21T02:18:55.642195Z","last_seen":"2026-07-28T17:21:58.044612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/be_gamble_aware_icon.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.175Z","timestamp":1785259284175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/be_gamble_aware_icon.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/be_gamble_aware_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yn3npp20ob-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V25ho1fx6%2FpuDBn0qYZ23SFsTXeTzRL%2FN%2BaW3D91tSjt8mESBnaEaseIqhFB6Cs%2FoZ3eDvRG2%2BbAA4hdAvWfWJsfN3CnbeYOgYlo3k9%2BDXBZAZ7hk7BWZNtTe1atQ3VnLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5e196656ae-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94187,"size_decoded":44560,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cabf5a6798388bba301c4f11737e900b","sha1":"6520aa0b76e64af3352be583a6c132a9ff343f97","sha256":"f2dacdfb25093fb7aef311ca21f74029249de91e3a01281981a054982810e61f","sha512":"9087f527d73c4c2edcda872dfb7ff5e82997e757b6b218fc1428e23685779c44d6bfeed0bdda47680cc4ea13c37e275c9b35dfe79373f68033fd157703747d2a","ssdeep":"1536:vPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:3N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"e393102a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-09-23T10:56:20.472788Z","last_seen":"2026-07-28T17:21:58.048921Z","times_seen":58,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/dwarfs-gone-wild.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.108Z","timestamp":1785259284108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/dwarfs-gone-wild.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/dwarfs-gone-wild.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vc73af5p1l\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPk0bplhmmfT5l0iAsmmJvGUSt9Qjxj2RL%2FJrSY5OB3ak8JmIQHS1Rif3pKX%2B%2FSDPqym3ft1sEt1rIpPs0eb1qYd0TdwtWj%2Fye2JS2atPIyuXEM0YWu9%2BgMHz9mXr%2FF8BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32457,"size_decoded":33486,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3709caca49932081f7656fde53713afa","sha1":"4f86df2061aa5267414a67ca149435ba7d278a1b","sha256":"36ef41c21d6b246f3d410c99def56f00ced590c37225662cfa26199a75fbb873","sha512":"55be2b4b658f168e25768471ffeded35aefea4148fef98631ad0d8838c6eb640b58f489f19f186133bb1593ca5c90e139a8e66213fb9e3e4d0cb78c7c48ab822","ssdeep":"768:kx4EqCD4WoVYs16qcTqwUo9DNOSZOV9ImIMds7:O4Eqy4cm6TlUo9pOSZOV9zIp7","tlshash":"f8e2e26f6f0758c8b92c5a172a578363774f0bc857a30219abb0782b197d282b5d5f80","first_seen":"2025-11-17T14:13:19.359209Z","last_seen":"2026-07-28T17:21:58.049894Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/images/bg2.0a6fa5a4.png","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.349Z","timestamp":1785259284349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/images/bg2.0a6fa5a4.png HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/images/bg2.0a6fa5a4.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf4ov9g4fhn\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhD82kkt2zj0VX6X2L0BIXwBKg0DTZo0ULImQ5uDrPJsp6M6Gs9UyZ6pp0HfDdSXYxdKmtHYGvII9zzyqtBXSd4P0YBAmv1cwyNQSgEoIO3ijl19Z0QFYlzC036rKkuQBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5f397456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206699,"size_decoded":207734,"mime_type":"image/png","magic":"PNG image data, 1240 x 430, 8-bit/color RGBA, non-interlaced","md5":"1eae503a93497a4f7f99d6b54c539773","sha1":"e3ff31095b1d54c89da011217b4a54c21fbb4eee","sha256":"124f2e0c2c462a17b09bce852561498b2033fde6d94e486ad4b667abe90a1404","sha512":"093f0777aef853962caba92aca1b55835ff6c448ff06711423e6903b2c27ec450c1dff88a901ec8109a74616360f08b830c0c2ab869bfeb9301c8c500b6897a1","ssdeep":"6144:K46TvMaqnUV7dz0L80KzM8Nf4UnjrDIL6PBZ:K46rRqnA7C4Y8p5rDA4BZ","tlshash":"5a1402bcd0cbd662e0d5cdb95ba61b6cb85a123ef4db21463dd2ed0b10bd2a4c03965c","first_seen":"2025-11-17T13:46:09.697878Z","last_seen":"2026-07-28T17:21:58.053939Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:42.335Z","timestamp":1785259302335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:42 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nG%2BJeOtfJhVeLbBS3JODcgUsIuW%2B45I05PYI4TYNbUkOzSJrvovHJ2t0EKJBc4S3uQnjNxlW0V4CR9mBlI2iP1cfI30yR5ltUVc2GBI5gauopbWDgENIw91XqLZ%2BtFL8SQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258fcf9ec256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1035,"mime_type":"application/json","magic":"JSON text data","md5":"6f7dac16b7d1154c2016cc7db3e6c80b","sha1":"6217a2b8f1f9273dd8f9787513b30484f27a81e3","sha256":"367bdeb349df8db32ebfb1bd8691847ac1739f036dc7851a3bd84b10945c216d","sha512":"c37b96f6b322e7047aca4e2dc6f8f1dfafc420ea7a04e03c16caaae88e3e29268c00e644ee17629022c8f672008a575612744ae78e8e9144b65741a28e98187a","ssdeep":"","tlshash":"d9a022cec2c0cc0f03330220888b30f020a8cecfb0a20c002bc08cc808e33830023c00","first_seen":"2026-07-28T17:21:58.054924Z","last_seen":"2026-07-28T17:21:58.054924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.336Z","timestamp":1785259305336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhI4s0iYRFYWLXizXUSnYcdTbjXIvpxI2I9yiYnlmb7wudsQW80LAN0QGa6RW91i3xbTIXu71shByK%2FHkTsCcTH6C%2FTPuJmmtM1SGXncZDLywKYG89gKZF%2Fy2%2BEoPUWtgg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258fe25f5c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":1052,"mime_type":"application/json","magic":"JSON text data","md5":"f61853a847f6fa4ec623417050d5fe14","sha1":"7db0d723130630e0127c290497769be901ae20a6","sha256":"b5d443a17c8ad27882058f8c84d9673196649e566f4d87af4b0722acdb564608","sha512":"cf7887ab5f1e9fd1c87a8ab49f66ab8485f4aba2eebc27536149170b95aba126362d52aa635192922611fbaf88d1c29f676f00706896f9a134999834f657e5ea","ssdeep":"","tlshash":"d7b012f7a02566c90a3383c0a5ab30c850680e0340922d01db8cdc41576930980fbd60","first_seen":"2026-07-28T17:21:58.05688Z","last_seen":"2026-07-28T17:21:58.05688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/monster-cash.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.823Z","timestamp":1785259305823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/monster-cash.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/monster-cash.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\netag: \"dha87vghw1i8mmx\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5MhFFyG3vDbBJu99opDDmc2rx6Ik011GstXx7KP7cIyJnBXaPCZDhHA9xVqTO0d%2BEJhPYfoau6pGaIs9pJvAPubI9mkvdtO9qX9LNDAVu%2F49YquK%2FlTCPj6%2BWedlBDblA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe56f7656ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29337,"size_decoded":30349,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2a8b0058102a98ead94a0a2a782d7c3a","sha1":"6b657279715d5525d4d6d8643d2a90af4c07c7c5","sha256":"e619e38c0056d6ab94b9ac5f96973f5835512abd551f3e040a4aad5047f714b1","sha512":"ff09c63b30a2f519d8bc04479efc8e2f89f0b8fedb6de8586fe77b1d8ed500f8e96c0a32611894010a8574d8b5ed5784790b526048a01fd303c47df976af90d3","ssdeep":"768:bRwArYmxGeomEY7uf5Ee9UXDsjvPNZxdproecNoTHpO8:bRwJmxGboSf59UXDsjnPNcNKTHx","tlshash":"c7d2f1186b18b49c8e9dec6fd67313fe09532ac8bff036879a405229c77589cf4a4472","first_seen":"2025-12-15T02:33:05.908405Z","last_seen":"2026-07-28T17:21:58.059303Z","times_seen":5,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/winner/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.333Z","timestamp":1785259305333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"767\",\"142\",\"904\",\"512\",\"153\",\"669\",\"186\",\"876\",\"938\",\"823\",\"811\",\"453\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:45 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofxoqr13G%2BctiBMq0uPmb9cPRUYHgus7NWlWTpytEsrjqIjI%2Fc0fuXnt%2Ffv4EMaHmWkrG3rt4Uqq9F6XK2bPkGuJBVJ1FJ%2Bfm5vrMOCpK5168eC29TEWKYhv%2BDALZv5lYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258fe25f5b56ae-OSL\r\ncontent-length: 223\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":574,"size_decoded":1210,"mime_type":"application/json","magic":"JSON text data","md5":"9f39f74738436c71c151b547fd9479c6","sha1":"d2b121abed2df6654da2d80114feeeb1ee0f3a1d","sha256":"665916a8337a3da002bb34b04beb5737e0d2d68fa38c18cd32aed8b6fd02febf","sha512":"704a7d590fc89f16d22282e585d6c33df843f336e7c92e3c0997891d32b4adec22b7bac89fee3304a4fd1636a0b79e420b701bc86ebaaa470d4533098d9ce839","ssdeep":"","tlshash":"31f08c226a42a73ba58310e0ccb3efcd1015ed12552d8874fcbf5aa1d3228602f8830c","first_seen":"2026-07-28T17:21:58.060502Z","last_seen":"2026-07-28T17:21:58.060502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/dark-thirst.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.791Z","timestamp":1785259298791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/dark-thirst.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/dark-thirst.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vbj9xy1kg5\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFCRqQ0hTVzX%2FWnJ5KUfcGoSQWKsr%2F7XaMXP4WFdXa8%2FKFHGW6LDbkj4qThBHA%2FvteBA9nuBwnFW%2FP0ixuUEBgGlCo%2FiIGTO7rvbaIhk%2BTOKjGhihaGIdSOk4%2FtIxdQpUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb97dd356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26501,"size_decoded":27520,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8ea5a42b07a7b1c0471f0857c62ea8bd","sha1":"a76740077cc064ab63d75b97fd1f0e1f05b9af62","sha256":"21dcabe8f17922a8cf2bd6bd2eb8f0661044a5f426d97b30d5c4cf8667234a44","sha512":"4e226bd864632d00d3a0921f0ddfc05b94cfeeb7bcd679fec000f57e2965f4f3bb3d6874d73fbc69553ecc4fd5f212b16bb10e02755218680e7ecb1f44e4bd21","ssdeep":"768:Gp23IYRLDJX9FpnlROhbiOrRgk5gnE3TyHm:GC7JJj1bQiRk5d","tlshash":"7fc2f11283508520f07d4abf296a6ad060487964093ab42b6cfd7c523fbc4ef4eec3e5","first_seen":"2026-06-08T21:53:39.607482Z","last_seen":"2026-07-28T17:21:58.062469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/safari-heat.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.100Z","timestamp":1785259284100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/safari-heat.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/safari-heat.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vhmdj42m6d\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e52jc0CRlt1WroSVcbedMxh6uZi6BNHTF2aykpMfXwayz%2FYvt1wMms13lzhCdkvlWUBXHjm4TJn8JfZ3AfyAVsXOKfOtV7Te1bhdbKQyYWri2v5lrM%2FMM8JbB9VWTPc3IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5da92a56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28741,"size_decoded":29757,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"579df92e14aa122dec09d33f7a22f177","sha1":"2bb471a8755a12129361393f1607d93f19332384","sha256":"31ffc1003ed993c09624e9772fc5470f0c48e761b28c3ddfafbbe8edd333d3cd","sha512":"b490dfba33805f2a54da9eb8ff24203437f3e681152ff9ed622cf9e6109e94e0af8d1a9587e97cde12575ec04a381c4a7a2acc9dc8d1edb615e2a9f21a47c1b8","ssdeep":"768:JETZaJm1OA1GIW2D9jmGvZpj0Q3i+2JAhMl:akJ+GCD9jXrjxyjail","tlshash":"add2e13b622a98faf4dc423c15a847b13a144274932361bf68c679dc66b4dc1a4f4aca","first_seen":"2026-07-28T17:21:58.064212Z","last_seen":"2026-07-28T17:21:58.064212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/rich-girl.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.115Z","timestamp":1785259284115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/rich-girl.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/rich-girl.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vhf8brrojw\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTMS0aCxS%2BwwiMkvajke52vQ%2BEYKcoKXOE3Zsgnl%2BdB0RRliJJpCTqu6Urij1KhjxpxbwC585PjBDI1kSMkBm%2BkJ%2FP5A9M2q8WnHkCVO40pqrUFFxNS78xtOQXLL1xcfKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31820,"size_decoded":32840,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cdf89c613ed2a9cf11329fb7a2da3a66","sha1":"5832d16198adc69c28b51559b4658d8ac04b6bb9","sha256":"3705abba5aa885791561abce6a0055b8d28f8390be245c12a774f168f5c463ac","sha512":"b2297a919cfd9f78b57dce74acb68e8241b57020cf6d5569f4baacc9d2892267600270f01040d237261a872e013087d686125c59ed0575dc1776d6b825fd6c18","ssdeep":"768:/gNxMU8cF3gbiqtgIfwuw0FmFd9Rb14tZl9:4NOU8cFwGggZu1FCd9R54F9","tlshash":"1ce2e05d2214f2d1fa39b73c58d0fcb7e385e9299632532a335b9a9dbb142244cc86f0","first_seen":"2026-02-01T01:43:13.939966Z","last_seen":"2026-07-28T17:21:58.066624Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.358Z","timestamp":1785259284358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf2b4tdeb-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BthdC%2FsX3lIb1Iv3qMxcIkcO4df4khDesM5cjwoQ%2BytLVow%2FzvQJywQPpr92TwXCyl8tFOtDEJTW%2B4X%2BKK4M6R4HtYd0stp8dhIdql4Ijk2bLedpZDhjMgXNzfnZ9Wgliw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2258f5f397a56ae-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1298,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-28T17:21:58.067812Z","times_seen":84,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/aztec-warrior-princess.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.842Z","timestamp":1785259291842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/aztec-warrior-princess.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/aztec-warrior-princess.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87v9vqkrburf\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqZcHQF4XT9J12E5wQji2pu%2BUpsSP5vdEj8FbyTD15hZhnmqexomvTgpLGeD0GptMsnyMs1E4wlVczDlU6UzDdhDoyUnx8qX0gpBz%2FgX%2ByX1zf0urBleIt8d9HkiZXRbEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c2056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39867,"size_decoded":40887,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"144f1c2e3c09b717fd5ac8300c54a7d8","sha1":"f47285f4254782bd5e0a8ba76bf75fcbc314e290","sha256":"5712be345d2c36913703e089efcb672a009729e3490ddbc21a2698c3fa2b5f2e","sha512":"2919034c7934fc1ffb7f0289335152abee7df29c9fd580523437cb1ca615bda58580e7704565145acd8e1f03d08ca97863387188c1ca582ae7f735524a10f6b0","ssdeep":"768:T5cju/WBTlZpeti3ywC8qStxk/x60dfO5sHnu3D0Gzzy0zwyR76NdOH:T5cj3kgFSSAp6UisO3Q0yg76NdOH","tlshash":"fe03f1d8d36e3e9cb40d9b2d43f5b92214cbdeb30d428768861454b877b6ac21d3a35e","first_seen":"2026-02-14T15:47:18.900394Z","last_seen":"2026-07-28T17:21:58.069561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/app.js","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.084Z","timestamp":1785259284084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf72lpj197e-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cXDKqG%2FOT2X7wc7altNS7B7xqk3nEY%2FDoIo9pBTpA90Uta76mEjJflC3aO2eSfDp7YydPbQOB7qMzkt8Jv4Yfh3%2F2TKhPT8vBNOLcR7Cttkm3IF%2FyEJukKZAhAq8HJ3ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2258f5d891f56ae-OSL\r\ncontent-length: 8052\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58586,"size_decoded":9102,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58525)","md5":"614439f93859eb949774da21bb3b324c","sha1":"96fa5d909ba3a1c7bc55dce813707ff4ceadc68c","sha256":"8de78a081a5fbe1aea6edb6e4f26bf6d36e670a219ac50fb65723c02fa0c7065","sha512":"f05df3dce5b6a9b7c81d1d84035f31289ca915264cfe8effe1b68f2ca0f71fca11bc24aef62957c391002d470d744a1ff55cd5215a1058e98209e7e68a61bb03","ssdeep":"768:toC6iojJ7dLfn7aJBVawnwxw8H9bBws7blPaNdfPtnaaSReFA78iCKkKhHzLzan3:iiiB7NBhvCfPk978akWM78QOJ7mPbB","tlshash":"cd43c75cb38075324597a232425f920ab2767455208ac4ecb53ac8e5bef8c9d7273fbd","first_seen":"2026-02-02T10:45:14.569249Z","last_seen":"2026-07-28T17:21:58.071793Z","times_seen":24,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/baner-2-69c14cc37f5b10.33656906.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.095Z","timestamp":1785259284095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69c14cc37f5b10.33656906.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/baner-2-69c14cc37f5b10.33656906.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c0jts4\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxjufiBRSbRIDa%2BmIFfX2PDL%2Fh%2BUaQtvG%2FHutroanIwc4ApQLjxdo66NKFDUVj8SMR2HvE0B2oX%2B1Cs1pe4mTInPnk1b0UuViSQKd%2BBjl3HeHFTUBdFrHMjVjwk2UIez%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5d992756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":925060,"size_decoded":926194,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"f35b935e0f7353d919082306f39351cf","sha1":"ec68f344fecea32df1ec0c9a83aef347441de75b","sha256":"03ff3386216bb963e9b40f9a46102cb1c1ba9d338c2c08524b38f3b460772fe2","sha512":"a54ad4fcaa077d097142f7136178b9744c73328f237782b9b1226c4dd3928cd8899687adad7398089343a40f222f948f55ffc21d32762dfdcef92d5f1991b4ed","ssdeep":"24576:6VPRJveMZ8/ExT83ODq61LFLM6Wsr99SjYfQ2ynWgfY:gRZdoExTE61VMHW9CYf7eY","tlshash":"d0153368ed3020cb0df9c321f863ed9c4b4dd3a3a4aca68f55145dadc9ae35f65024e9","first_seen":"2026-07-28T17:21:58.074028Z","last_seen":"2026-07-28T17:21:58.074028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/golden-fishtank.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.104Z","timestamp":1785259284104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/golden-fishtank.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/golden-fishtank.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87ve1ruy7gxm\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zv9eirez1wMOXz2vUJkkyBHuVl9XbnwJXo%2FVoOCSg4puwy2hEC71bMK2CHKJI2W%2Bg6yPRO4yLZHBT53p88V4ToqmpgozwL%2FDP2tFpZMt6kaONrc693kMBUMyQrA26xuKhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5da92d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21946,"size_decoded":22968,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3697699dc8099e0f4f9f3c966dd950f7","sha1":"00f4213b8cf1a963cf2970ea9c17d75315d0de67","sha256":"3aebccb8ad1cbdfcd2aecac9d166d10b2d05b69ec3284e2efcf58d1dfaaf6016","sha512":"9f07062ecf2d2a2099eb1b9b2a42df61c3c171c70f69b0ae0c5899ca8b106e4a3678ecf6cecb443041bb1ad9d30eda8f20929b1fb7a44436b21a834e6683e83b","ssdeep":"384:RYIiyzzNM0kVPtcDNZYCKaXVVHVvNvs5JjllkRn3jyURybq/ZF+IW0pjkbUBh7:RYIiCC0kV16QaXD1RsDkj7cq22SO7","tlshash":"b2a2e115e1aeba01cc7efdd1efa405215a8dcd676bd7cc62ba03d20153359988c69393","first_seen":"2026-02-04T18:36:07.346333Z","last_seen":"2026-07-28T17:21:58.075973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-12.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.156Z","timestamp":1785259284156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yrv4lx2xs-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2njnc9sCbz9vbS1qTzsQpd5ZOH6IhgBADpkRaxu%2B%2FHJJZjoXI4gm%2FJg2uep%2B5YfqTGerTQCAeDvp1fv4Oy0O8gdiCL6nbPSIbqn0L6Qib7Q4Z6BGlddkLxyo0w%2BYRlTOGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5df95556ae-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3808,"size_decoded":2741,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-28T17:21:58.07831Z","times_seen":78,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/great-czar.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.833Z","timestamp":1785259291833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/great-czar.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/great-czar.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87ve6jbufmuo\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZO%2FgbSktVfqi9oC0FxgfTrltBHI6iRRUG08uMStrLzT5RCx%2BmRjZf4cMVASj8ocSJDpcFSh6jpxFlyX49z4F9RnJo7tB3FJ7jmo6EoYWwWiuaYhEfB3EfB23deBPAxI9vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8dfc1c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29616,"size_decoded":30622,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"42291efab9fadc4f0063a9e54cbf80dc","sha1":"3a36e5c810ef172594337f23f2167e30e9beab51","sha256":"a8f4ec02d2a5edb51fcdfefce92692f153937e0499a7cae7d50df1acc660e5fb","sha512":"d83c5441e2d7cf2022dc61234a5cb1272ee7e88d2a167d5464e695631f1b1c40e542652491397ce77fef59777951bc9dd3f3bc83e69f0090cc43c4872c3d13ec","ssdeep":"768:8wewoM3ZOAimHVKuSCXZIJRJ7wP+DMfrw:droHAdHE71wPNfrw","tlshash":"50d2e1d057f5a8e8f43e252c1cb7d6f0cf556ad3796606b141de3b2dae68c43858290c","first_seen":"2025-11-17T13:46:09.682047Z","last_seen":"2026-07-28T17:21:58.081041Z","times_seen":5,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/all-american-poker-10-hand.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.851Z","timestamp":1785259291851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/all-american-poker-10-hand.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/all-american-poker-10-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87v9f2fmkfiy\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZwtBM9tyEDAJ5w96739Y4vdNEj6y%2FAeThsWB0CrrwKSmVXf5lBCe4Oo%2FDZDsYWcMD7KdfctCjy6pxxkzzf4vFKpvTJJAAcGHzVZ9eGHTzDubL%2FY8pPNlXkLVLHQZsjtsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e1c2656ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20122,"size_decoded":21146,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b5be71236ccaf01ba4e72562d494c4c5","sha1":"ef0ab94eb931cca0a5b6729cbc0d4d86c61425a3","sha256":"d6c04dba22a7c0af79dfb0c87201a44f9565c0af53681de182d46f24e02e4e52","sha512":"3e7be826d115454addbb0077064a78c171e51428ae39574003c5de94710434c71d9233520af0368d44b65a0d0a1616a1778c27713f774df11f942bb08c10423d","ssdeep":"384:CfNgWluxBVSbm6tRtEX+JMg8zuCuiXlYFEpfx6huP:CfNgWlueLRtEX+JR8zjuCYF+YIP","tlshash":"6e92e19bb77785f9e46c07b20154e2265f669e1f36035cb9016e2fe033fa60845343ae","first_seen":"2026-07-22T10:06:13.303399Z","last_seen":"2026-07-28T17:21:58.085941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/pin-up-queens.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.795Z","timestamp":1785259298795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/pin-up-queens.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/pin-up-queens.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87vh0xx33odl\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyXREvwEmu6X3dJE%2BlfroXYSg2cVj71jItkt2YiXWCPuschv2ZvtHJhdQTAEejrhCgbwDhyUmrkomUafoNVmvFeMh0YYH8cxXB7wfVR0ckibnYedd4n341Mp5iV2fpf49g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb97dd656ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31593,"size_decoded":32600,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e88c234f165bc920b76245999b62a843","sha1":"4ea53ef75a773cab5feb9a0a0e571b3d90741f65","sha256":"1256ee1c114829f30a8f383b601614becb928e9df3fa38badd99c83678851981","sha512":"681260a9afc7734dfaedb2f93212e918027ce0223b405e22c2ef64b24df747b9c46f5ef418499c5436d6ef6ed658099c646fccfb5363b995d14566d800645214","ssdeep":"768:7jKYtrJlen3Z5C2zVONZs9vmigNyv47Uhk:7jprin3GQO2bk","tlshash":"a6e2e1df3705b17a4dac157a26ea305e69418c49ac20d11b2c65a833f7ba447cfedce0","first_seen":"2026-04-10T09:55:29.751274Z","last_seen":"2026-07-28T17:21:58.086899Z","times_seen":3,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/palomino.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.125Z","timestamp":1785259284125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/palomino.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/palomino.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v7kdv3i66f\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Nt0%2BYLkyUWFLqaXApYisZnynAdjI26DfaNTZBlZUKJ%2Bgw8du8c8aKoxDuwkZhzF8X3S3IoGL2x6ETSrtzcadgS9MWsF1TicXvDq2gjOwfUUi4IERlXWGAn9aHEI7xcJBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd93f56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8007,"size_decoded":9022,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"89e6c4e6ef66187b80198e864bb8e74d","sha1":"b18ddf1433035db4649291f6594eae2dccefbb18","sha256":"b81dc004895e80b99e95600fcaacea8173e50c1542beb3ede55c4993458a16ca","sha512":"f2e78a52ed814972f63e4d0e4e6cbaae6a8fea74f39682713de678fc95abdbc4b1f6e50817a26f7ed55cf855e7a6cb43d29290705a4977f637864723f4a5db7c","ssdeep":"192:Ej9WEhhE1xbH+udeLY8TCBo2jab6ovb6yxA26:2WEhYJxdecwCqLbI","tlshash":"09f19ed49bc016b2fb3d1db501851b56c698d70199a0b59e38839faf23be8f62d012f0","first_seen":"2026-07-28T17:21:58.088801Z","last_seen":"2026-07-28T17:21:58.088801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/great-rhino.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.841Z","timestamp":1785259291841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/great-rhino.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/great-rhino.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87ve8x2ailwn\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CV7lFWYHTTtxwwhwLyHI6RC5NEZ4KJHUU9WfLzwpmpuv8AEjGeoMT6Xmsms6R2G50BUsTyPXdzRymHQ7Ebzx%2B7s8G235d7dnCBpb8F5drTVY8YjMK4PB7PH44AP4MuV12w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c1f56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28391,"size_decoded":29396,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f4e11fd9bff4646df0fa922c926910d0","sha1":"6c304d981194436fa266fa6c980a9317713aedac","sha256":"1ee59656106770b20d72bb6dcc3abf0d4ac72e490cb4440ae90942698d155393","sha512":"8ff7d4296030de157936d1f3de18e27aa2c4c0e814a6b31e09e1be72ba6362a4e14f662e901b45e21b9eb123a25f92e15656c69d96cb988ec7f0df1360618893","ssdeep":"384:hKvOOOsQtTvrLxCIBBj9K7wF/2qZlMolRglmsqRXE10EE76aCr0sL2RuExCIw:h2OCIf9WIqlmsT10z6aQ0sLP","tlshash":"61d2d1af1ba85203ed5d99b4c1ed52522ea97dc6314d594eeca0033722f52b7cf80d8a","first_seen":"2025-11-01T04:33:33.165397Z","last_seen":"2026-07-28T17:21:58.091286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/vanrossum.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.780Z","timestamp":1785259298780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/vanrossum.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/vanrossum.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87v8k3vt51pc\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeQ7Q0xpOMC5Y%2Fzgps9av2x%2Fd%2FkT02wGwjSRZbWV2VYIQ0WFIqMLQDNYwVBEzbh8C7leZldQKKVLpV6u97Mx434ThpkPLER%2FEGqeSNuNFtX0zNZ1s8LGgFfVy0%2FdScmJ7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258fb96dd156ae-OSL\r\ncontent-length: 2025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2208,"size_decoded":3057,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"b31517a58fb75e6fe1f03767fec1a135","sha1":"38053a7c9d1f55f99dbef3f4a7c0954f947fb25f","sha256":"fd6cbbe924ffe52c651231d062787d7a2ee2193bddf6a711ebf9bee0c05f0de0","sha512":"331dcbd0adf2574980e9eaa3b631167318f7ee07b72320fbb0e43a044c9326ad235177d7ac52e939cea33672808af111fa434304cf69467a9ed23a571f0ef46e","ssdeep":"","tlshash":"cd4107f21bb6a923d8af0f31506aed90ba10ae507553e8c86bd16020a7ad29805d00d6","first_seen":"2025-09-23T10:56:20.282506Z","last_seen":"2026-07-28T17:21:58.093631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/app.css","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.065Z","timestamp":1785259284065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf72lpj1jhp-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZessPvQenpnumO3%2BtgqLLJgxujmXU3GM5oxQeBUbNO%2BQ%2F6MIiSjsH3geDGkD1t09gws71fVVveOv9n6T4%2BJN1eWxfiprUsGO9CkLmb3025LNDXiByL5FanMWC1H04rZrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2258f5d691b56ae-OSL\r\ncontent-length: 12084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71917,"size_decoded":13129,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ad1b1bfc8cc4c4c37ea9cd12ac5e3aba","sha1":"4c68c917574c18d04911ee4661e383e3cd8b0553","sha256":"4c79ad42fac75d04fa07104b37810a603c6b6f0b22ac69037507a4849fac0836","sha512":"e6b5f055d59193405b37a7c80f14981f7878786417d5f8041e1efb84fe8d4c60e6669e4bd915e7c16c0dd806134e3fab8e1c9321b86384c657462f2b8f490ab7","ssdeep":"1536:LnjcNOd/dtyScbuuH5dt/j5azDAXuhBkM6IF1t:fcNTk","tlshash":"f1636423321a203cb43fc565a8d0a69d712cd407e76b57fdee52a175c9ca2d31b36b88","first_seen":"2026-07-28T17:21:58.095571Z","last_seen":"2026-07-28T17:21:58.095571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/jin-chans-pond-of-riches.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.111Z","timestamp":1785259284111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/jin-chans-pond-of-riches.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/jin-chans-pond-of-riches.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vf1hvnum49\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBIz1aVPviEUHyrhAAeN21b6t1RRq20FVggwRbtS5kdVLLcyoW5gGOsTDRxoO35cKb0vtzWduFvJAYqrU4UiY46X%2F8arNAx934lGDXejoHpGYoU0Jw0Cg7S9LpC8qPVe8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28665,"size_decoded":29692,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"27227e885516afe647f78217ebd6e119","sha1":"034f0e104f4584329d90012461435f24001a2251","sha256":"3a9fe6d8d2cc21aa4de0dfd2fdeeb4d7dac7121cefec43fd02846a8168d042e8","sha512":"ae014dbf9770a79991b8a9878fd7dd4562038a8b5d598fb8036b7a067b0fcce8f4c883fe42d6ca3e2bb7c22449489368963d89e1c4be20144dcf34e9c846abaa","ssdeep":"768:9bPKfMn//5wTun/bpVi7V/9QwWZ0qpZfwsJ:9bD//5wTWPitWKsZDJ","tlshash":"78d2e0cd6b9a81066c5f9837df9f3c7b43a29b0397044072a51e541a73412f0bcb2ab3","first_seen":"2026-06-01T02:18:17.544085Z","last_seen":"2026-07-28T17:21:58.098483Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-1.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.139Z","timestamp":1785259284139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884yphe5t17d-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKGvwyoRCclaQ%2FMdCvKla4qRbTdjpR1LfnLOltLdM9L3WnKHBZ5AaPjfEgugjxpp90DPT0XVQY81YJeC7aKPs40WSl5YfmBetZa1HAjYW8bKABqeX0zOGjv56DusckaXuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94756ae-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1646,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-28T17:21:58.099408Z","times_seen":78,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/svg/games/table-icon-2.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.140Z","timestamp":1785259284140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha884z1e2ec164-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 469\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klnnGbSEWGkmGXo1TwC63j3YyGiqHAqq21jibrJ9hKz68SG2LOLvq6Ej%2BqdurjBRkUcxr%2FIhKsLXF%2FOpoLk0soH0oyIHhYuWUJ4Q9an0DedwCM%2Bj7zS%2FTVugQuEeHuy8yA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2258f5de94956ae-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-28T17:21:58.100257Z","times_seen":78,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/build/frontend/images/separator.b41ea2aa.svg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.353Z","timestamp":1785259284353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /build/frontend/images/separator.b41ea2aa.svg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/build/frontend/images/separator.b41ea2aa.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha8bwf2b4td1fl-br\"\r\nlast-modified: Mon, 23 Mar 2026 14:25:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 470\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBqTRpWH0JH1E29fYr9i82wQu5sd8xxm4AkeDFxbi4LTi6aAB3iA2nFJgdO%2BaQ5Jr%2FyKsQ%2FaDlNce6a4%2Fg5h5Mjm6Cgzuup1DePz0TPjQ8RPSODcx4oJY7isQa8hHsl%2FGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2258f5f397656ae-OSL\r\ncontent-length: 477\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":1532,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9daf1b07e5b803bff6868eb008f09ffe","sha1":"3218da25e54049accbecade543d951e38f2b65df","sha256":"909f4c851ec36c9ddf133927ffd875944fce26ab178ede5c225d633c7b2c849a","sha512":"054133a5bbf13be7352e1b2d1f4563ef67521c227b80c2fe9fd2ac3588b074baaaa637db1a728f1fd55c36af78548f3d3fdd00b43666973d921ba2d415bc893f","ssdeep":"","tlshash":"0e31ceb4322cf019c6194b0af1e36af8109fa2cfcb62534dd29079975925ae739147ec","first_seen":"2025-09-23T10:56:20.413635Z","last_seen":"2026-07-28T17:21:58.101121Z","times_seen":48,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T17:21:23.342Z","timestamp":1785259283342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 2643\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 28 Jul 2026 17:21:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: enc92ed29b077b031071c609100a5e3ca0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vcelgAkTBXKDg7bpiWF0enxQ4f0XCh5CZF9s167gWHtH3n2Ip8xZoPCnHK4Uq5rH%2FwpOcmSVF0CfKTu02Zos%2BBO%2B2%2BAe%2FA%2FHgckN4zGeTtyTieJNXS%2BADE33iQu9B40aw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5918e756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191420,"size_decoded":38113,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4424)","md5":"f2a7b0d6cfcdab8ec335a64ee5376303","sha1":"344218358f963644360c1c65910570453d8c47c6","sha256":"20334afb10e9d9ce3309e8a80f521e17edf2b0d019e9b226b8406b5f5a30e06c","sha512":"bff7d346c5a37d93906b2e0eca642e86ae64ed29cfbc444bba829e249cab8793675d5e11ced4c0366e0e57af0b34af55b10e9706dca713ee9b56c6cd05e11c87","ssdeep":"1536:7e8nQoGJhtqlg8oFYSnArWr274Yb7QbjGe8gW9:YBD8nSnNizb1","tlshash":"dc14f8ee27f405a34582c3d27f212b5a3e92d52bc6464504f2fc4b981fa6e3ddc27989","first_seen":"2026-07-28T17:21:58.10198Z","last_seen":"2026-07-28T17:21:58.10198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":7,"connect":18,"send":0,"wait":477,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/cajigas.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.118Z","timestamp":1785259284118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/cajigas.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/cajigas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v5z88cw5a1\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hav05vDwfFAUUgwRKd1UcTbTOtbS5nS%2FToQw9ljiqX1CwVVVPSuGGzncohPCnOT4faPM9Spt3tI5tIT9fNkJyO3v1EKqX4Fz33fRvkTtnfPXgCR2aMAy5oyGcWADx%2FSY%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db93956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6841,"size_decoded":7857,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ee4fb397aa6b6d2bdd70c913b297eb6e","sha1":"30ad1f8845055beeb6c0fb93a02616c8c3f82ec4","sha256":"41de06eefb4a4b543875a06832fb98b08fae054d1194e61959184ed5aafc8ce2","sha512":"5a0de294db62a82b4e2010d70606898bc37cd55eb41d0cba11c5be7507cc0053673523471570731aab33143edda5d5b66396ac3ae99adfc301ee63324cecbd1f","ssdeep":"192:w1fwQu8kewwp5YTk1CqtFimtMHurGY/7/Uts9iMB5:wp3hwwp5YTxq7i3HuCYIs9fB5","tlshash":"65e18ec6f682d643f53d29b240256f5476c10753fb247f3c48e42cb643aa5c7694861b","first_seen":"2026-07-28T17:21:58.105467Z","last_seen":"2026-07-28T17:21:58.105467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/avatars/ken.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.124Z","timestamp":1785259284124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/avatars/ken.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/avatars/ken.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87v6yy92j5g1\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 470\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2a3iPSGWuq2DO1bijJDyjgepkz4ufiSrQCwYgJvU%2FzO9B8f74EGAucL8VdU%2Fl%2BpxHeP09wgmzKY428agKt%2FCUDJ%2BCzVa7dPW78cGoK%2Bj5doYh5PpYnSeesoSCDTvyWf3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5dd93e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7057,"size_decoded":8075,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9b118f9f3a60e9e562bfb6a942e0325d","sha1":"794bd0d86cf07e4db9e120c697bbf197593a3d0b","sha256":"07800358ae475e7abed8c638af69afe3e3957496b60060c7711b03a95f5300bd","sha512":"f6fc4e3f4e5165bb834383d9c8ab10a1deb674822b553122e41bf579099b5dd57a72da1cc081e1a3081729299c113a9367a9d49d145c636fed1b9b8ebbf11adb","ssdeep":"96:tTMWxkId1htLhbJ1kI9hFaCAPtWM4F/fVcKu3zyNnxNKRiDNVe8R8cDJ8WE:hMLoTtH1r9hFwPtCF/SmZGsVeJZ","tlshash":"5ce1aeb327e0b118d42f13726f3a1966ae10ee4818541bd37e441a9d8b273b5f9e3889","first_seen":"2026-05-13T21:36:15.969278Z","last_seen":"2026-07-28T17:21:58.108694Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/ajax/game/","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:27.329Z","timestamp":1785259287329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 111\r\nOrigin: https://rainbet-us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"exclude\":[\"1074\",\"1059\",\"765\",\"942\",\"2518\",\"1762\",\"1968\",\"1832\",\"1366\",\"751\",\"2248\",\"1047\",\"709\",\"5\",\"2071\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Tue, 28 Jul 2026 17:21:28 GMT\r\nexpires: Tue, 28 Jul 2026 17:21:27 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Fri, 28 Aug 2026 17:21:27 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=is6nqgwfvJ5NbBSE2RpbrKRzExp%2BmF1v65tlmLohe1QMqEAByzCJfbk1MFEuBVLni3NAS9uIW03IwDeoRsVaGSmnKWm%2BrxUluAJl5EoOP5zF1SjuQvU5kbMigKRApHK6DA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2258f71dab456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1134,"mime_type":"application/json","magic":"JSON text data","md5":"eb764de34c565925c2acd2c4c650f5a9","sha1":"dbb5a2768c13622bbd23a2cadae324a1c82b1f06","sha256":"a6d04ebc1207c6293478ec7ec433b189375b318e83aaaeb8b5cbc2fe869ca92c","sha512":"9f3d045f777d90cf4de25f8aa80794fad3e3ae2286fcea6d59c3726415550c10d0d9f3af5803e101293682cbe611708592e73eda267ab8d02aef031b75d7803d","ssdeep":"","tlshash":"e3a012ce4840488583330500e546309018140a035192c80c12c579c3ca102010052d45","first_seen":"2026-07-28T17:21:58.109966Z","last_seen":"2026-07-28T17:21:58.109966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/pink-elephants.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.723Z","timestamp":1785259291723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/pink-elephants.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/pink-elephants.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vh0xx33kb0\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FwFVuZ%2FloS%2BJVfcUWsu0jLWXISXUw5ZBrNjVTdZjszp1IAqUuOfzWVm1VZgwyHpsV3y1Yha6M%2B2ZvktUNS7Ao3lLDc8Rv1PHxNhhDpaTQqM7at6OcCkKY2an5lauRuZJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8d4c1556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26316,"size_decoded":27330,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cdb154abba9725bc82763425364477ce","sha1":"68c7fcc85936f94b5bf21e01f6d8f2e1e4358eed","sha256":"c8dc0d4c5059e9b019292dbaa165c5351cd5bd3f8638f5078a58335d7d052002","sha512":"691a0502d5186b07e1bc45b94e48e36e4c111138b9a99c478214532ed2544ff4ffe34a8c4d18b49244a8b85513a7c9a52ce22051c83db48a2d2e0f1b0267d6f9","ssdeep":"768:FxZPgqnqPD5Q2OHqLMawsbztdEqjzg/n+Nm6IXjK:fZoqnqPdpLM9ezEqcacK","tlshash":"46c2e11c637e88b7b31b25e77ba067540f093dc327daa69f186163b00b28b4154926bb","first_seen":"2026-07-28T17:21:58.112548Z","last_seen":"2026-07-28T17:21:58.112548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/vikings-go-berzerk.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.807Z","timestamp":1785259298807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/vikings-go-berzerk.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/vikings-go-berzerk.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:39 GMT\r\netag: \"dha87viy0829f23\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnNU%2BxEyVwSL13aduD3NQ7jOwSMYggdieukzP1Ic29r35GAUDuoPINhHunWfp%2FSyCn8LoPSzMg2dhgDOVjaZorBofWV%2B49jhd%2B%2BFoEASIlTR%2B147GaRLRioMjA3v9Vy8ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb98ddb56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19515,"size_decoded":20537,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"61e7efa43724fbb3aad1b76ee435cad5","sha1":"251ca69e344cb94b2034cede6792f696cb3d1a6b","sha256":"ab27e5399fef3c97c2916a3e6808980fa64952c13715164a6c5349ca7aee20cb","sha512":"62a37c40e4855960a604194e6b65dfe4c5004eb673d257fe4191aaaf8d91dc13528444e30e6a769ebb81bd84f73f636f3ed1269de4f6a84d78ee935377cb893c","ssdeep":"384:PuKpgSmKxPdqBCO4JCng9hQObhJP6DwdfLh0w7JgcOZjTPE:x6SmKxPQwOYCg9hX/dh0wIhTPE","tlshash":"2792d10ea6735000a30ed2630b0727e25a52f5c2e1de4d9fcc87f87a8fb595c495e2a7","first_seen":"2026-06-15T02:37:07.722423Z","last_seen":"2026-07-28T17:21:58.114656Z","times_seen":3,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/irish-eyes-2.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:43.719Z","timestamp":1785259303719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/irish-eyes-2.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/irish-eyes-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:44 GMT\r\netag: \"dha87veucobina9\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmBdkcYbjlA45Sd3Mm0YhM1NQh8oJK1BR99%2BUO%2FZA8pBfVJuiuS%2FjmtkQ5%2FKjvJVJMH2%2BQwcbxfh5vJu2l69pvT1NwXLOxAQnotMukgBTcjAs8TtV8lKymK2jYANPBhv4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fd84f0156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30177,"size_decoded":31191,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"5a27d9e0cbd400a83e7c12a151201856","sha1":"252a07767d28e64b7ac6ae7022b867f37c206b66","sha256":"ae2001ce7dbf4ebab3b8773a1e529be19c2ae1b2b6c93c3d927291b34e84f495","sha512":"8db49332627a5ee33866571c9cc292b9d2e17cb7fdbc6d6c9f392cfb5ecf5e889d589a916a19e7b7d16ca24b60dfe7cacd1eb5ba476cc04e9b1cd711157eb701","ssdeep":"768:UUKlSuh8g6PGyeUni14NG4jHlknvoZeVj927K3IYbaHUsxuq7oinv:oljh81Gytnj7qvQDKpa0sTv","tlshash":"f3d2e174cd91ac8e07ef5de845bd9b9ea6c93cb41f1a9fce48211ca4930a2b5d3c8314","first_seen":"2026-07-28T17:21:58.115626Z","last_seen":"2026-07-28T17:21:58.115626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/star-fortune.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:45.816Z","timestamp":1785259305816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/star-fortune.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/star-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:46 GMT\r\netag: \"dha87vi0nxsqhw4\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVI8W0ARwDipputxLzRx7uqATtv7V1QJHfpogvKOcaJ%2BD0YpMS3eDA6JDSXvBl7JXrB8lelGcN47cYbHPp4RF9Z1eMBYjFd4Vn0r77SXvUKcpDQuF7OiaSBDq1w1VYTQdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fe55f7256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23188,"size_decoded":24194,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f2bd96f2e85c77e230db5b7a17430bb7","sha1":"ef53f8c9dc2cceee4d685dcee42135cd4537722c","sha256":"081a0d56bb9d5d2fede6a44f805682f90c9041d19ccbdb865e700c6319174764","sha512":"b55676c7be135db1828e534cb7ef9a573adf60700bd61ae6744fe1a5ac6c5b5848359c9fc5b48ba19ea5077c6793fa209d98eb91b7e699991281a3c11cb64b27","ssdeep":"384:mWtALNm8SBXWn2SPvdIJmGiJkHlsEhEQyvRVZ6z8QXlqA4Anp7nvVpVcds5wUep:m/03O2SHdQmPJkFsEhI6QApLdzylj","tlshash":"c4a2e12befc13dea896fd67363ed2020e82108d9d38587f50d12a872ff571e66898149","first_seen":"2026-05-01T23:27:36.649652Z","last_seen":"2026-07-28T17:21:58.1176Z","times_seen":3,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/kings-of-gold.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.839Z","timestamp":1785259291839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/kings-of-gold.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/kings-of-gold.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:31 GMT\r\netag: \"dha87vffsacgkf5\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 462\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFRH85IxGkFxqtnw1fTHS7kzOi4BGzinPi8Z82bJ87V3euIOTEuR67s4OaLzDuHljtUYkIc2nIbaddbZnFxtKnU4y6zZ7ZuQdG2Z2gXs0UfSG0BzqLFksSebYHFB%2Bwv%2Bwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c1e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26465,"size_decoded":27483,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"468def4536637780f152c84b22b4f297","sha1":"5f1576d378d06b468663ce2d6990675a8962c7d6","sha256":"d650c03383184485891847edd8c8f942f41af90d7576e0c0df1b6a194cad5b01","sha512":"c3cc1330589353bc92b871c39b750c85c3955be5ee471e517328302693d65b933b08e06aae4e818dd4fc3654bcc4abccf4129737393cdc9322b003729a8faefb","ssdeep":"768:eco+7NmRJ3ECoqYp2cVJiMXEOapuZYFCnM:eMoNET3HfiMOciIM","tlshash":"a6c2f1c318412a76fa5e586f5e4121e81a0c0a73eec28ff93be43415136fcc1c1e9ada","first_seen":"2026-02-04T18:36:07.435364Z","last_seen":"2026-07-28T17:21:58.118792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/gardener.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:31.844Z","timestamp":1785259291844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/gardener.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/gardener.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:32 GMT\r\netag: \"dha87vds8x5rjff\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUZJWjXQ9q%2B2gyq2cJKHUFKa%2B2NxDwocRcNuqHq4WbryQwDmrn1I%2BIO6bZmlo9qplIlv9PeW9iLlCfFde86ncaicE2MJLWd9Om5lhCoe5xBJkEUSVUe1tn1k5Kd%2FN8ajuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f8e0c2156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25179,"size_decoded":26187,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"103277742b2500e3ed0c634709a1d81a","sha1":"765ad64d7d794f10faab21543e6068e844ad68cd","sha256":"1035e676dc6a11818c39e8bc317279bc309448ec7a4705a52decbded428b75d0","sha512":"b9fe1c26277fc1c8406d39f531f2d8a3f3bbd4a15a0e2f2abf66d1920497c6d56226069c2c6253867625f39f7a56d3a41b8bd4ea18a958cdee32ff6364a09f10","ssdeep":"768:YWq++CfKOy71mAtJbIjY1NkLc1k2XiDhfWR:ypKKN1mGbHPg2yD9WR","tlshash":"f2b2d0b97994a4e1cf6c12a252f4aeb59e11e6c1b36dbbc784eb0e2c13e507509e430d","first_seen":"2025-11-25T22:34:39.276838Z","last_seen":"2026-07-28T17:21:58.119678Z","times_seen":5,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/lavish-joker.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.105Z","timestamp":1785259284105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/lavish-joker.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/lavish-joker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dha87vfmxhosp6y\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuhUx5RJLtZ%2Fp3%2FdQcslLtXqOF1QCXLtlPaPmb4azjYRtKg6aOwd9pcw9huUj6dACeVNYW%2B3M0Mq3GeWyLNTIMBsxzsypnfx4ri%2FEzfiWPGAoDJVJPQaz53L0os4QnLwNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5db92f56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32650,"size_decoded":33671,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"29ff358167dbf61e9ac1f9bbe9e109b7","sha1":"4b707eb502258a4ec6b33218399c5c0ac103a84c","sha256":"70cd5e47b375e2aa5b87610e959736f3584df4f7d010d116a8c62f6de4c942cb","sha512":"179112eb383e7e39ac7d2d96399193ccea6db957a0f0941c876573578811321653c4ad170e7567b5d558b83856365815525de7958f2d20883d8db634d311d818","ssdeep":"768:wL0kk1BPp/KqoKWVIM37058j73E+NK3D+nlNPr1:wY15pSqcY8n3/K3MlNPR","tlshash":"f6e2f09aaba1383cec7872c5e2f0683a74ce45881068b1cdfd21c5439fbbc053259693","first_seen":"2026-07-22T10:36:34.629927Z","last_seen":"2026-07-28T17:21:58.120743Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/banner-square-69c14cc33314a0.16808240.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.352Z","timestamp":1785259284352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69c14cc33314a0.16808240.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/banner-square-69c14cc33314a0.16808240.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c01sw3\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WApTTrAr6miZldVnWOeME3VMY%2BI9F7Nm3pg5Q%2FF2v6V5jkOG546JvlJiZPz8QneN2KTGq18UQripR0KAny%2ByuC2abZmQw8lp3KZDhcdMW4OV3cqbtZzEclondP9%2FzajpPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5f397556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84099,"size_decoded":85153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"44f204c88c11cda5f963b69dd8ace461","sha1":"ad630cefbe23a44d55787351db224f9b01ed40fd","sha256":"0dd06c4aca86c80779a185ab422c0d9becf218a3ddbcbb42d3829520b8978bbb","sha512":"f3beb549d9fb82f73300297b9434dda3aa0059e6ab7c644301e12dc81883e8878dfa05b38ec54e4113f02bbc51ad4c15cb8bd03ec3dd4fa7fe946ae42eb57f36","ssdeep":"1536:vEsgHGcMYgp+pyy04/a57/kra1AoMXqJh7oNVNr7GbSCOuSOLbzQhubyNK:cz7MjiyN/hkoFhUXMbfbzsuu0","tlshash":"21831200e6b9139556350da66bf8b48c3ad04f157a0cebae2730ed76d1b41b7ea4320f","first_seen":"2026-07-28T17:21:58.121767Z","last_seen":"2026-07-28T17:21:58.121767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/2026/03/banner-rectangle-69c14cc31e6143.16796660.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:24.354Z","timestamp":1785259284354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69c14cc31e6143.16796660.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/2026/03/banner-rectangle-69c14cc31e6143.16796660.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:24 GMT\r\netag: \"dhaaqrrhp1c03czn\"\r\nlast-modified: Mon, 23 Mar 2026 16:19:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nage: 469\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NnlftDQE7ChM2MZCcSIusA7MaRqPLaGq9IQJG%2BTXlLCaIimFzNZB1RJr2MZUt2Tu664fpp3A9%2BMq3GdhQvosaK2kumap%2BnmQ229tFY2TkXZbtG4RAyOdBbvsF8QDjwWVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258f5f397756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156803,"size_decoded":157863,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"8f35094706b21975a4f3f8153c5982cd","sha1":"1245b415763c2a80158f9c74401c244782624208","sha256":"a3c376d2c815b4c211670dcc6db3c5ec6eaf4e01486cf6fc8d98f667d61f31bf","sha512":"504d1897a3a8aa325f80bcaf7155bf9f7965662a0f746b78bc0ada4c66d4ec2fddf61c389ce045b0729eb7d89f5193f912db87a949b11c52d110f02a1b089ce6","ssdeep":"3072:k/Tj/AAdrDAIbg3St1nEhxCEfl3McGcsKSiXK9ZntPfDbGhrsorzJ1kf8:6Tjjrl1nmflfssKntPfDXqzJ1u8","tlshash":"2be3132dd9f782912db813b4ad3f94df76e60c9105714c01ff5985f3e22ac28a64ed29","first_seen":"2026-07-28T17:21:58.123858Z","last_seen":"2026-07-28T17:21:58.123858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-us.com/uploads/media/games/cleopatra.jpg","fqdn":"rainbet-us.com","domain":"rainbet-us.com","tld":"com"},"ip":{"addr":"104.21.13.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-us.com/","date":"2026-07-28T17:21:38.811Z","timestamp":1785259298811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-us.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:53:21 GMT","end":"Sun, 11 Oct 2026 12:53:20 GMT"},"fingerprint":{"sha1":"BC:6C:EE:2A:0A:6E:2A:77:A4:A1:59:EA:30:BD:1C:CA:65:CE:3E:BE","sha256":"91:8D:3B:0D:E2:6C:F2:5E:90:89:B7:77:6F:8E:0A:0E:9A:EE:17:E4:E5:3C:55:60:BB:2A:4E:18:4F:D7:A5:83"}}},"request":{"raw":"GET /uploads/media/games/cleopatra.jpg HTTP/1.1\r\nHost: rainbet-us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-us.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-us.com%2F; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-us.com-/uploads/media/games/cleopatra.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Jul 2026 17:21:38 GMT\r\netag: \"dha87vb9r05more\"\r\nlast-modified: Mon, 23 Mar 2026 14:20:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ng60AVGXNwU46gynl5e7R7pKqRWMJLlDcyYF4MDMHamHL58p4QCSoe7posjpNd7dZ5C%2B34Pvmhd%2FycxIXLyVxKwPP8VKLHA99vHM7VIkzQolpHhmn4qe%2FuxJxih%2BI2Gydg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2258fb99dde56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32090,"size_decoded":33099,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7cf9fccf6ee66b3f95aedfd44c13af2a","sha1":"66a9c33ee407cff0631dacdcf8fe66dbfdfc4a57","sha256":"71a0f12242933dc343ec3c7ed01121839a0bef1ebc8f58f3e3cdeb2ba6509aab","sha512":"2eef1c6db6acd74096b4f76e0f8e8d4d80885e1cfbbd1f471d695180484d5a49e12423e8b624dcd538fc44b6b3198e9c190b5a5c8c6f1290534376b04e3d0337","ssdeep":"768:M55u8c3NuUqNmhjZA5ZPS1GaQ52OC3BE2mC2R:MmB3NqFXF572mC2R","tlshash":"77e2f192844244fbc6df9a4a7829939da1e1cbca5f26d748432c6a04472127531fdefd","first_seen":"2026-01-04T02:47:03.852383Z","last_seen":"2026-07-28T17:21:58.125984Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbet-us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}