{"report_id":"a067f73e-bb9e-4689-8c35-502ee806f7ac","version":0,"status":"done","tags":[],"date":"2026-07-08T11:42:45Z","url":{"schema":"https","addr":"en-en-us-rainbet.com","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"en-en-us-rainbet.com/","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"title":"Rainbet - Premium Online Betting \u0026 iGaming Casino Portal","dom":{"size":117214,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"92addb01646d3c456421bbc0490dfb48","sha1":"5c7892ba6c80d1e14904a966830ba150948cee8d","sha256":"ada9725e21c19a319ea9808b725d79032f5656dc9233960f9594c3ac1c072f4e","sha512":"a75dd6f10be3a3c800706ec7ca12440b8892e1dcf2d98364ddc19d4c788524308e007111008f50e040c1615d5dd02feb89c910360947b5c7e36bd0c948a9568e","ssdeep":"768:jxJG9f9KwF1eOuhMgJCkM7/ZqPiKMbR7hQZfbVV7I3dtE7Z:jxsKwHeOuhMgJCp7JKMqfbr7jd","tlshash":"22b3933a90f2367301e391e967a61b4bbeb9c103c90bd5187afd43850fc6e86987725d","dom_hash":"domhashaf88353b8188f7112293c43f45ca2ede","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"en-en-us-rainbet.com","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:42:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"en-en-us-rainbet.com","ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":48,"request_count":16,"received_data":8359753,"sent_data":8419,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"skycrown.us.org","ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":266558,"sent_data":5920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":2,"received_data":315900,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dm.imagethumb.com","ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-09-16","domain_rank":0,"first_seen":"2021-06-18T20:24:33Z","last_seen":"2026-06-13T15:02:01.220802Z","alert_count":0,"request_count":8,"received_data":548792,"sent_data":4642,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":2,"received_data":254083,"sent_data":1134,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2026-07-02T22:12:23.252524Z","alert_count":0,"request_count":24,"received_data":1732953,"sent_data":14448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T10:46:10.949158Z","times_seen":20626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"745a3a931274b6c56b492b7c462c6414","sha1":"3110a36c4ff4ee7fddcf6ba56cd368ebc3507de7","sha256":"6e6442a0789ad47066b11383c5eaae595969aa33a6d9ec7e710946a9f9f7ff60","sha512":"93cd3e8d75ff1a9ee9ebe99c044e0c5419f972aa265d3bc664a3c9d8655150f23f1012f50d7faaf7df45e6e5f74532abfea2fdec62f7af328741837fc76b32ee","ssdeep":"192:6N+W0xc2nWq3Tq0BEdfAzAWGchwS1dvCIQLIQsIQ8cgIQ+IQpIQT+EMX/WcnNOFJ:6wfrDq+vvJ5ac2RmLB","tlshash":"cb62e81a72b325760de36dfe936b2246393a80835847d144bcdcc2428f49dd6e0f66ee","size":14726,"data":"","first_seen":"2026-07-08T11:42:54.126805Z","last_seen":"2026-07-08T11:42:54.126805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc_ca/sgb/gold-rush-express-640x640.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.854Z","timestamp":1783510932854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc_ca/sgb/gold-rush-express-640x640.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/avif\r\ncontent-length: 85565\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 03 Dec 2025 10:07:27 GMT\r\naccept-ranges: bytes\r\netag: \"e79a38a13c64dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=EOBHYQM5O9OSX.1qRKbxwWTVfIMgrwaD2D21HKyBmtY-1783510933.0848784-1.0.1.1-ZZ.SM1QQTW5WiLc6sGk__zvjmrhjaAn97wblidIbHVnTeWwhmniEGGPVhTltEbeUJMLg5XYWeAVu_lGv4JkfaIXC8q0n3ETs5GX2gqC_RDBlEx3fcDXB2YrDKnvyg9Uo; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\nage: 2346967\r\nexpires: Sun, 06 Sep 2026 11:42:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed303ccad569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85565,"size_decoded":86349,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a4a7fe917b6f4a1ae02d4a9b6c4da1af","sha1":"46f5a5b5b85710c808583ac893dfd3e92b648d21","sha256":"d3ec0a194e8aa9fd304f5d7e3972404d02b81669fbc9549dc7ca8ca7011231cf","sha512":"0730ebc8f745aa3ca7a59be5158ae2019555405f1cfc9c7e1f68743bad15e8baa278491c938a490787317b398ca587ebe7c50c705b9ae015fc9884af54c22b38","ssdeep":"1536:4DItcdD6LB8BUYTe3M7eJRyPKjOpGErur3x9vu1HNIIojAa:4Eu6A17C0ZI3C5NIdUa","tlshash":"f38302398623da31d9f82fbafbb525ac53dd27489763762dc1813e1b51860313c5b5c2","first_seen":"2026-07-08T11:42:54.050068Z","last_seen":"2026-07-08T11:42:54.050068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":13,"receive":2,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:13.135Z","timestamp":1783510933135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://en-en-us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 709\r\nexpires: Mon, 28 Jun 2027 11:42:13 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJrUOhBp8EdmebOXRsiS61mOr7AJEJSijz4AcchFpl%2Bo5%2Fy91P0rCLLlXa2aI6F34JKLOGoWNerRvCRFbbOzjaCmf5ZQuFRd79BNBUJZBF2MC9fg5QIhl4DmeC7FiP8qU1jIh2aI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a17ed30429b535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151087,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-07-18T10:34:43.807934Z","times_seen":40719,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/e1ce1632-c314-445e-84bc-1e7dbdc57200/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.426Z","timestamp":1783510936426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/e1ce1632-c314-445e-84bc-1e7dbdc57200/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13306\r\ncf-ray: a17ed318a8cc5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2279257\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfiMnD6YZafnXyWY_NLCletWNHfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=18+97 c=1+42 v=2025.11.0 l=13306 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 2637B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13306,"size_decoded":14017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4090aca626ed5f09cb95bb25720da81","sha1":"e777380c69c3185dcc14d5318830a128ea52f3c5","sha256":"6ba945874743d6969bee4dfda8097a9d562f17fc6b532c4f0213b4d41b8bb42a","sha512":"3e43b39a80b2fc83fe4c319079710dd85d209df70045ee3d63a0c3519e2bd928730dbc1562693be55fdb4c6e6120f7df4f40e68d6ef8d729eff888fa2390c8a8","ssdeep":"384:6I89x8ZHxa3+QsdofwwVJAH+jN5FJWq8So:j8Aa3+LdQAejN5y","tlshash":"4952e1fd96be111130f315a51283923b7954697168784ccc9dc9bc6b0d39cb8c7d82ce","first_seen":"2026-05-01T12:35:49.72188Z","last_seen":"2026-07-08T11:42:54.051993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/620f1489-d0c5-4aa2-6423-7ed33b326a00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.399Z","timestamp":1783510936399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/620f1489-d0c5-4aa2-6423-7ed33b326a00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 269878\r\ncf-ray: a17ed31888455ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfHxadUfgpRGs5KSx-i5Sd0-9yfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=137+146 c=0+0 v=2026.4.7 l=269878 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"AVIF anim not supported\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269878,"size_decoded":270597,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9531ee8dc36419b45aa9ed1a5d6fb74c","sha1":"5920eed8f91fc49031b37c2804395e0cb9806bd3","sha256":"a89c7b11afba9d413730b6068a468efb4b7d689ca364dd17eb6745ce2f58c0c1","sha512":"6f3374ef62b1c5aab768180011a271f2d28268c0009d2561908e495be8555395b7b6514b2a2844bacc19d8566ddbf52933338be742e41da898eed8d03f91887e","ssdeep":"6144:dY83MEIVVA/7xtjQfOGAhEHUzQgfsrr5BivsJCP1s8KAb:Z3M5mxtjQf332sr1BBJCP1rNb","tlshash":"f9442390d201a750e3f8bb9a527d15a642db1586475fb3dbca88fa182df0f1efc660d0","first_seen":"2026-05-01T12:35:49.751889Z","last_seen":"2026-07-08T11:42:54.053259Z","times_seen":4,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/6198993b-12bb-4731-a9fb-85125c631e00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.433Z","timestamp":1783510936433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/6198993b-12bb-4731-a9fb-85125c631e00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17818\r\ncf-ray: a17ed318b8e55ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2169560\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfYZTEBS75VfV50kkd_BL1Xh8Vfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=26+195 c=2+58 v=2025.11.0 l=17818 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3611B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17818,"size_decoded":18530,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46d671abadadaddb27e0ff0638bb8663","sha1":"f32f3d9ddb9cb52d6df72647bbdf6b37fdce5f7e","sha256":"f16595c773c74b8e652bb1b6a20763e0deb73dc2fd7c3ffb68b6504f81235c51","sha512":"01cad7fbe52051c016721ff940055ccfa208af4faeb165ebdcdd7867a9be7d1d23cd6e22f29cdc8a0009e0110405137521eece155d03af95cb9ad6e80d6bfd05","ssdeep":"384:TttWESz+S62GsFGG5hpsmhweQg6md5xOIkNonAOr:BE/z+S6fxG5hpsmhO9md54IkSr","tlshash":"ab82d0b1b773d13b5ec3ae59a1abac7df34e040e219e82ea50ce10a302751c977ce551","first_seen":"2026-05-01T12:35:49.740958Z","last_seen":"2026-07-08T11:42:54.054781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/32.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.826Z","timestamp":1783510932826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/32.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:18 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76WmaVPcxrbfseXM5em73o8T7M8BnNnRA%2FhCSE72c0vXyLbMpYZZjZk3KALLC%2FQ2ly8WRA5U6NNKH%2FksxIW3ut7PzHh%2BxLLkm6xyhdm4iBigi2Xgw1L4dWongVIs3BhrX%2BWjD6Lzhw%3D%3D\"}]}\r\ncf-ray: a17ed3022ba7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4002,"size_decoded":4681,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit colormap, non-interlaced","md5":"e7851573d8eb8e7b1095aaf974700064","sha1":"d70de3a3780ee03dc895dad084f8bdb416573b07","sha256":"e6fdd8929ab435f44a0a80d5d411c8dd84e799171db59a82e9523152276763a8","sha512":"0f77e0b71c4f0f7aff27f08cac4a906ee378e4cd050c2a0822a846047a592806132ab2ed6d3fdbab0b2500e95fbd1cea9db7081c7a728c5621409795e5fdad5b","ssdeep":"","tlshash":"ef816d92d2c3e914d9daabfd813ea5324b411fb795171c44c6775e68e608893c88ccb5","first_seen":"2026-07-08T11:42:54.056044Z","last_seen":"2026-07-08T11:42:54.056044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/38.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.834Z","timestamp":1783510932834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/38.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:48 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFqOd3Q6hpMhdAI5EbTrBQwTqnhejCMIREIcIC1Mi8jGKvpZzrLUHjFznIMCzDFsftAw5tGs1lPJQTPlLtWwOL9MfzCs%2B4rlGvUR%2B1ZYN%2BnDTjaq6xE8yJHKkN0WvWIQKlAqjOdkVw%3D%3D\"}]}\r\ncf-ray: a17ed3023bac568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13067,"size_decoded":13743,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGB, non-interlaced","md5":"58e19d5f17b90b2603df028dd6de3274","sha1":"5a563e0885667e44f578440c89e054752534e42b","sha256":"fadd24c699a200fb2c9e7ec1e317a967ce02bbe02b351193cd69c16267b86e0a","sha512":"1ba2f3f227b2d92894ec2932ef71d9a653ab4050cb40038f90672c0b51c489208d432228ee76e8f7a26dac3c276c55e0085f972fd7906c5cd0c2a8313e131165","ssdeep":"384:BPmuTeHR+vnyZhnohyoziIJHJfA2GQ5wvg3D:Zd2EyZyhvimH1jjKvED","tlshash":"6042bf2f0788e8066e68c7561bd8d9f01ad435cc0fe2bb00c71573662cfb899c4bea85","first_seen":"2026-07-08T11:42:54.05703Z","last_seen":"2026-07-08T11:42:54.05703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/42.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.840Z","timestamp":1783510932840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/42.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:19:02 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTxe4OrWuXiC6tpaHIS7Bv3lNczTIKQc3m3u58%2B%2FVPPsLrzkujQ8FgWz2Rz9FbXqYHZc15yzcPMze2%2Fln%2FtwHIH4zCy5iXs7jKabtStgGGoT6teQt7JGjKMAYObsNzSsX4YnAS9tQA%3D%3D\"}]}\r\ncf-ray: a17ed3023bb2568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87939,"size_decoded":88617,"mime_type":"image/png","magic":"PNG image data, 4827 x 1080, 8-bit/color RGBA, non-interlaced","md5":"35f175bf110c5ec495b8d5e2d26b2295","sha1":"fb0f868d988346beebe081a15477cdc684c740c2","sha256":"8e2c9a53f4edd0ea1b75b0c06b37ef8b4ab0d9eb37ec3f62025cf8895a27effe","sha512":"d83a9d941ff070a86a113a621e4205cef5c22537749bfa629007cc579ec6e5c1691cc3247507aa330e4ece86dd4a63d49194984f2bf44165dba84096f5c8ce04","ssdeep":"1536:jG2m2fNPIjKhraBHQ/4JjJNhiHR6UlvN5ttCkYflq:PmfKhrmHBj2lNNN","tlshash":"4583d00a0f47dc90f7718cf6487bae473f2ca8bd084695db19faa4f6f91064ab1191c6","first_seen":"2026-07-08T11:42:54.058064Z","last_seen":"2026-07-08T11:42:54.058064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/9Coins.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.849Z","timestamp":1783510932849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/9Coins.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29346\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:00:06 GMT\r\nexpires: Sat, 12 Jun 2027 04:16:23 GMT\r\ncache-control: max-age=31536000\r\nage: 2273149\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=TL2DUJppY.y6NXlJeo_NLJTL8z5YBtl7oExHRZC7l68-1783510932.947766-1.0.1.1-9xVfRFASQhMr1mBDrf2oFdKkVFvO9xliTt.IGCj_JlzIQ00SGF6gwIbtDLyBnP6vWzdNoVoqiSeK6EGmheDye_5GEvbrVva81RGM6S7iHehT3EldXJiWUarr_eWsrPba; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed302e8e45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":29346,"size_decoded":30071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54c65e9f4da3d9a368f2ad44b97b8647","sha1":"1d2c786af3fe3019f8d4459004a63c675b2752d3","sha256":"31b8d54dbc76b5762e76d7bf6df415071f9cec3cfe7f469cca6fdd0bffd1e103","sha512":"5ee666e9eddf7a396f51c799037fc8e2ca7c77de807f427bd78c1adb9c8a15d88d4640c34612dea0f4e0e7d33940ca1af033b80205ed22baacf02948168e50fc","ssdeep":"768:oKh+Timvgzleg+EpMKezApQ8/Z8j9BzmCf63V0gl1:czkl7+GMfApQtzTylB1","tlshash":"73d2f1c61ae8d46be05daa287fa8c281107f4dbecba0b5598df9c431fa490d3479cd12","first_seen":"2026-07-08T11:42:54.059115Z","last_seen":"2026-07-08T11:42:54.059115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/2.mp4","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:13.003Z","timestamp":1783510933003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/2.mp4 HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nlast-modified: Thu, 25 Jun 2026 15:21:18 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-range: bytes 0-7841577/7841578\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b80UpAYVpjcR6MHKcUQMf7UebkoFkgqCYezeIa1l7ScJ2JE4zRmivQoHYLx1bS%2FhuxhdNzCGFY4qjbas3AoUd2Gzvt3gcraAlghMIuHvyHz8Ts1chCbiaYhIUgJ6ayvMaXl1FbldRw%3D%3D\"}]}\r\ncf-ray: a17ed3034bc4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7841578\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7841578,"size_decoded":7842273,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"f4974a19e70f05d43a8f810c3fd33a26","sha1":"a01bf6d154b8c913e834bc72107442660679755d","sha256":"b2d9d8cbc602d050b73fcfba4c15cce014b1e0f1e6197f6b6939877545882ebf","sha512":"e9f63ac20d65cbe18e809e745868cad6ba983858973c5c1c709ca475dc0d1919e9ef6f539cd77e2fd6f81030948911036db2c79a86ace5498fa719321844ad42","ssdeep":"24576:JVd9pp83elplh5Prj6dM05+ehZQVkGbLIXeM5BU+ATxqVxfYnb9:JVd9puslf6C0jQfbLYeMsRQvAb9","tlshash":"132523de73ac80c6e6bac2fd1d9c605a06f6d11187992270bdcfb72c29366413f2a570","first_seen":"2026-07-08T11:42:54.060253Z","last_seen":"2026-07-08T11:42:54.060253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":1226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/d8e45266-c35b-49c5-2f00-17bb7ec0b500/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.373Z","timestamp":1783510936373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/d8e45266-c35b-49c5-2f00-17bb7ec0b500/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16918\r\ncf-ray: a17ed3185fb85ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2372795\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfs_dm4_Pf8VlrioJ7KiRB4vsmfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=493+186 c=0+0 v=2026.4.7 l=16918 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"original is 3950B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16918,"size_decoded":17651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b520111023d0292b50a0a9370c06ff7a","sha1":"fccf8232716551b08f17f4435d9988c973091dce","sha256":"7dccb4fae7a2479a44749b2812d16d328a77c32cee5aaccde8d23a456b441231","sha512":"9d37d0738852dcd35db27e16f50653e9c0b6f8d77553388722b4e64b0f700f6888dc48439912a81d8571e54eb5827fb194ba9af501d6915fd650b4f0c47df671","ssdeep":"384:ljscmB3496ixiycSz2qFFN8o/DfG6jRxYOtgzAQzhTPTEtUvwL:lPwI9jiFS6G/5/DfG6NuCgzAQFTTEtr","tlshash":"6b72dfca888ecf0bd47e02215afdce4598c55181544ab84ea779d330de8f71fe2172b6","first_seen":"2026-05-01T12:35:49.712875Z","last_seen":"2026-07-08T11:42:54.061247Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.793Z","timestamp":1783510932793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230189-FRA, cache-ber1080020-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2520836\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCjq39m2qVzXfpLxvDoOAH4ijUIY9qvNaatCMuLgPpEr%2FrbHjLGqF2HC%2FLGKl%2Bn2vJ%2BS%2BPsySUprbNKnLn5ogPWZmj12J5OG5%2BQ490zQyOE61BhIhVvqzE8auS4lUiflA8s%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a17ed3021fc432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":34321,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T10:46:10.910868Z","times_seen":18146,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":5,"send":0,"wait":6,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/b05ae06f-b4dd-4d0a-0eb0-2b23816d1d00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.820Z","timestamp":1783510932820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/b05ae06f-b4dd-4d0a-0eb0-2b23816d1d00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 460692\r\ncf-ray: a17ed30239bb5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2250580\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfQp-DDGt5eHH6fm2xZN6pyXj3fb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=9+57 c=0+0 v=2026.5.2 l=460692 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"AVIF anim not supported\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460692,"size_decoded":461422,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7a8f29f66e70e62bb8c1477b90c818f","sha1":"3702dc807a593919a95c70502b8e2b10e40f2d56","sha256":"f22206a5f6c642f73dcebaf1e052ef45b19ce5370f8d3d95f4222198f2ef01b4","sha512":"a8a806cb6e1afc8772fc5138ed5cc5a262a4b7a5d32f4d52258bbfff6b482dfd6e1e7b952fb9e4684827099e141eddeac5406273e9f5837f1b3f8f928ba93561","ssdeep":"12288:pehztTCYoi8o4EHFjGL22mCHhaUtWdYCdEl3okyaBVXCFMrZ0/9:Mxr5Tjw22Fha1pdEClaLn+1","tlshash":"72a423d05a6bb249ecbe31be8cad02dca786339447a3d738967935504d7b230425ce9f","first_seen":"2026-05-01T12:35:49.720155Z","last_seen":"2026-07-08T11:42:54.062896Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":50,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/36.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.831Z","timestamp":1783510932831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/36.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:18:46 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMpdJTwI5a6wksglotS8m%2By3%2Bsk%2BeWjRJB1rHsIN%2Fz2STDctbQL8Ihxp9JWukgX%2BDGYmT469n4bx8XHyM6hn976JsW5BS1gDCUtGnsBg7LH%2BgWZ%2FMrv%2Be5L9TcPpDyV6Yip%2FvzmoIg%3D%3D\"}]}\r\ncf-ray: a17ed3023baa568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 82950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82950,"size_decoded":83638,"mime_type":"image/png","magic":"PNG image data, 3701 x 1133, 8-bit/color RGBA, non-interlaced","md5":"08159235ea6f395a84378ac2a012e39c","sha1":"2247aeeae6c4a639847690534dd5e802447253fc","sha256":"ecc6e463a4cfb24f80b6f657f81d7ae2eefd4340a9560abbe646c3676e8e9d33","sha512":"938caf158a6009dc7f87e203c3e6eae8899166beef8a3044a2c081967dc77a9d37bd19c28bef43320615c9f50b6c95d0209a2154d4b193d10a5e807c9f9c006b","ssdeep":"1536:X0WRr9Fsngz0/RKdYhF2EGWv6RRJ9Kl+6HURMieANje7q5GyvA6dIi8n:XbTuRKiF2EGWiR39q+EUl1SdgA6ipn","tlshash":"3b83f172301f2dd8d75181391890bfe7b3b9e8b8d2e2e71ac7395269683ad1d47ce114","first_seen":"2026-07-08T11:42:54.063999Z","last_seen":"2026-07-08T11:42:54.063999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc_ca/sgb/777-surge-640x640.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.851Z","timestamp":1783510932851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc_ca/sgb/777-surge-640x640.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 96463\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 03 Dec 2025 10:58:59 GMT\r\naccept-ranges: bytes\r\netag: \"68692dd44364dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=5H8TMjLrxo8XsqKKGu69xB7ivvhHkulkzuvJGhX8K9E-1783510932.8699117-1.0.1.1-RujifEYdGV4web7wYKxNwga5bEtBVU9EevVLU3Aa.IeqxFfcAj.VB9BoLG_mVqO6ZJKH_0j80DHkpXL3w.mIig678RyEuZEMgqVZIMczqguVW.jXrfAotEj3fYJBRK_L; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:12 GMT\r\nage: 2346989\r\nexpires: Sun, 06 Sep 2026 11:42:12 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed3026b87569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":96463,"size_decoded":97247,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"41c2cadb54e15c8ae2190899456b1a55","sha1":"52045b2b629c29e07b13099bf56f2e992f4203fe","sha256":"4ab8a261d9b909e3d190fa4a9ba58b7eb6b08eb5bed18965e74267a50a9a82b7","sha512":"040f8cf4ed6253db6c553cbd373a487de58f02a0846a9ad9cd26bfa6f57ddf106c586a2beb3974b25beeab4c0e36011800edd30c69389eaa7cc8411c2370f1dd","ssdeep":"1536:w9Ef9WTbG86wudifUSALsEmXgFg2DaC3Dp+Sh7mvDwK5FAn7plI896HJthIYil:wsCbXiifGFJtaCnhyvIn7pmJtH4","tlshash":"4d9312fd68e61a02c93d1339a2e8333c68d718df71e20b8940947ae5f446bf76909d66","first_seen":"2026-07-08T11:42:54.065051Z","last_seen":"2026-07-08T11:42:54.065051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":28,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc/dgb/AmazingLinkFates-dgb.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.858Z","timestamp":1783510932858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc/dgb/AmazingLinkFates-dgb.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 22938\r\ncache-control: public, max-age=5184000\r\nlast-modified: Tue, 17 Dec 2024 08:45:50 GMT\r\naccept-ranges: bytes\r\netag: \"e4f3ed126050db1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=YNJ0.gaRM36vkwsry_.CTsHOVWkCewF_Uk_Pan7Ls_Q-1783510932.8716488-1.0.1.1-QbCvPZA5El9zrpEOFAsfBkDp18KH0wvFFcYQM490mGAYFjxA229wJOrO.y_ELHLSKa3X2WV9v6rDpQCsRX8ZpKZSx7TVXigOso19AInAPvCFnQ.y9Xfcy6nNFVSSfdiL; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:12 GMT\r\nage: 1606241\r\nexpires: Sun, 06 Sep 2026 11:42:12 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed3026b8f569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":22938,"size_decoded":23722,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"88fbaf3ba53988d42541da45b5bfc47b","sha1":"268ce694002f60c79676235522e17dc95fe4554b","sha256":"179ff818c2df576b141ad9409ada86a4bca4f8ee3b6471d24c17a9a2c7f08da8","sha512":"1c8615e2fc60a024d356e754fa67b6e14990233e13d70517b7c9a386504a1760695f7fa5610b0c035e5d5d4601bf7fd4306112c48555c0a0b1ac87c6682ef5c1","ssdeep":"384:1qegTSZEdFopeLyaYCMm2PDbtV4qfa8CvX+rwAeeRYvf8JmUS04+y/kSfEr9h5c:PySZ02zNCj2Hv0ure4mUS0Ty8SfEr1c","tlshash":"aaa2d06539483901f80cdee63ca817f363c3ac6aaefc155a337f2125146a5bf2052a39","first_seen":"2026-07-08T11:42:54.066172Z","last_seen":"2026-07-08T11:42:54.066172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/94cc73d8-4f74-46eb-9b28-cec5dcceb800/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.377Z","timestamp":1783510936377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/94cc73d8-4f74-46eb-9b28-cec5dcceb800/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19360\r\ncf-ray: a17ed3185fcc5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1532411\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfhj8mtnHW3B9aPMRh0l57D5Kefb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=260+206 c=0+0 v=2026.2.8 l=19360 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 4619B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19360,"size_decoded":20066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0bb80fbf3099bc3a1f50735eb0b1e34","sha1":"3496cb09cc338143783edcdf610fc91f368746ba","sha256":"c07325ba8056b37b24568c18c9b6e23b75ac188aeca6a80e3d3c96b5dc3304cb","sha512":"ada4336b7f8121edda4db4d0b769fb88001c3e111aa806750807529765011fe91d7e64e9230f5c911661f0dc92b03ecfee4ab96069eacea4a06c28ea4c74fd9e","ssdeep":"384:Up16zE95GXYh2E/3KyDoyuP6IIpt0+A/U0+K7hIIamEZ:dzQGXCB/3KyDoDPq/+7dwZ","tlshash":"5792d089e241f96e6f1fc3c7778db91e1f19800de2a587052f83afe6426826451b7ad0","first_seen":"2026-05-01T12:35:49.717398Z","last_seen":"2026-07-08T11:42:54.067175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/ce525b0b-65e4-4ee9-1ff8-ec19f4c85a00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.421Z","timestamp":1783510936421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/ce525b0b-65e4-4ee9-1ff8-ec19f4c85a00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13564\r\ncf-ray: a17ed318a8b25ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2157851\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfl2bqgGSCZZUfNNosig9dKISRfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=12+73 c=0+0 v=2026.1.6 l=13564 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 2864B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13564,"size_decoded":14268,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6ac734590943e8ae5a80396077ec923","sha1":"86418edfe431bf03a0979be38443a08c9fdb10e0","sha256":"45451b4611319cf5b355516733086f5c8ebc6634fda4dee5898a687beb3f39cb","sha512":"7c2a1a419bb3caf92cfcee4716063bf2302714e16f1f5c0272b2db0c1e77f9343bf7ccd17f60d32dd71f82e0fcf841522ce50fb09ee7fbcb9e43f260595111a7","ssdeep":"384:AtkbQfaXdwt4ko705mF5bUwsQIduBXF2OV+7Br/:wkbmaOKko704bPsQ7F2OM7Bz","tlshash":"0d52cfaf3d879ba3350b8f31d52b5f0678f3e70b5805b9127e0485b1661013e99f9da8","first_seen":"2026-05-01T12:35:49.73002Z","last_seen":"2026-07-08T11:42:54.06827Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc_ca/sgb/abracatdabra-640x640.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.852Z","timestamp":1783510932852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc_ca/sgb/abracatdabra-640x640.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 94214\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 03 Dec 2025 10:59:35 GMT\r\naccept-ranges: bytes\r\netag: \"303152e94364dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=_Oclg.cyd9Z3OijY7OBmDkOMMKMLuDWSM.0rH86QDnw-1783510936.1870894-1.0.1.1-0y_1YfKDlSWBKlrdajx7vrBwaUpTbeZmOfOgcZXnxdtbFC7wZrYO_gKSpIADpLrHWvi_LSQLnv2m44rr1wBIsQuooEcRu9foRp9DvB3a3l6EuPxZD76_ZHCZQqUDKcvr; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:16 GMT\r\nage: 2346943\r\nexpires: Sun, 06 Sep 2026 11:42:16 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed3172cdb569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":94214,"size_decoded":94998,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6df93f2a60f636f2718b51dcc6ea8ec4","sha1":"ab9f92f99832f2fb0dd108376bfd9f96fe0484ec","sha256":"aa97d5e8835964e6aab36c58d0eea90bcc177e8ca5d0a9ff08fa5f97d80b4b10","sha512":"3fe95cf000b357ec45b14d7cd2103606bae6c51ada0e00fb7a47d1ba1c9f5ba59378a7e389c4569fd9b61e085f6b920573283c5550c61706390e44831324b226","ssdeep":"1536:ol3ShYQZK/jrtCJUn6ZROBhwRoeDpJoHyrIKByNlbRYSnRd9bBSQ9T3y02OJ5r/7:oo91+6ZgBh4XvdIK8N/YSRjJ9T3y02On","tlshash":"78930200ea50b501d65fc7bf364802e5c5570934abe90ef2496447b887326a8ffef36a","first_seen":"2026-07-08T11:42:54.06946Z","last_seen":"2026-07-08T11:42:54.06946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3348,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":13,"receive":1,"ssl":3328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc/dgb/AncientFortunesZeus_ACQ_dualgamebox.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.856Z","timestamp":1783510932856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc/dgb/AncientFortunesZeus_ACQ_dualgamebox.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 27842\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 21 Jan 2026 13:53:21 GMT\r\naccept-ranges: bytes\r\netag: \"263d84ddd8adc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=voukyDpDyIHh5xnud25I1mfBYgjOhf6mukmfg2DQCXk-1783510932.8747933-1.0.1.1-QIwBQRcqa9x2E44mv7rAdKEFftqCq___jKsAkeojPYXrkMc2JMlMsMosGqMuyXLxc3chlRynTaZ7uVW2vKZ.wdGMIRLHYy.i4KmmbPBBnifYA4j9022KSBHNRotnH8NZ; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:12 GMT\r\nage: 104698\r\nexpires: Sun, 06 Sep 2026 11:42:12 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed3027b96569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":27842,"size_decoded":28624,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a63687fd18f85b02ecca643925a2dd5c","sha1":"d0152976e930d13365a630ffad457e33501304ca","sha256":"66c8636cad35fb4aefe3fbf6b7716d0715d3f83b4a971ef26a09152181fe4184","sha512":"0e8d1214722531429fa1390b11e4ec4dd418593c1fad9b9c533fece46ac96be8605c047d097cce5b485286dbf420b549c6a78308eb2d28b5f65c7abe1e9e3f54","ssdeep":"768:QVMorbcmf2sKI+nASbyD/f7iHi9zZHdCPQfZ:QGmOSpD/GHi9z5soh","tlshash":"45c2e1fbad07b81bef05a67094c18ff2751de41c2601be138844bad933be756154b62b","first_seen":"2026-07-08T11:42:54.070679Z","last_seen":"2026-07-08T11:42:54.070679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":20,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/587024c6-849c-4da6-b797-4ac948d42300/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.428Z","timestamp":1783510936428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/587024c6-849c-4da6-b797-4ac948d42300/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13622\r\ncf-ray: a17ed318a8d35ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2511521\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfT0gKLpT4Jq_2IE0MwVmeL81qfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=10+134 c=0+0 v=2026.1.6 l=13622 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 2841B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13622,"size_decoded":14327,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73edfe7ea980693090ac612ade30ef0b","sha1":"8f6a605a79b9c5b81497843d6af14e7ee54dee77","sha256":"5dd2641fb02f8e58b83d453ad9d1a1a10eacade9e99d7de54d32b3c167a17927","sha512":"ec3bef94477fc7a9649ebf65718f9316042a72b3854a8d772c1cf56167f509eb665fb72752edc28869234d5ccd9bb10953961a8865f18aedbdbc1a34cccdc660","ssdeep":"384:9I3pkKXEoJPDMDu7V+/cQgJChD4FsAonC7MSy4:iZtEo1w6iGJkQX+rd4","tlshash":"a152c0db477924eb7b13fb5284e612de31d0856e2efad0b746c080a49bb519d8cec468","first_seen":"2026-05-01T12:35:49.739051Z","last_seen":"2026-07-08T11:42:54.071761Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/e63dd91d-deb8-4e9d-f3fe-293e6965a800/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.429Z","timestamp":1783510936429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/e63dd91d-deb8-4e9d-f3fe-293e6965a800/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16352\r\ncf-ray: a17ed318a8d95ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2261141\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfr31pSnzeV8pGCnXkK3h0dIBYfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=20+140 c=0+0 v=2026.2.7 l=16352 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3136B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16352,"size_decoded":17057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41e39b1b1205ba5b66f694c2eef86886","sha1":"fd1d7688f8c509e8f6d4081926e706af1204984d","sha256":"04cac98de3be91cc3e3bb0f944cdb40119803d7fb46c7808632b9827c28feee8","sha512":"0392f9a539a7eb2414f7db4ebb4f357509b25dfd8935c083a01a8fbaaf7f26f42d978c49e1ef7afd3350e547be758096ac403655a802304de46fad7436fd95fc","ssdeep":"384:N5gKDN76eb54qeOFBGHrsGb8V8NhcywRQ+bErjESqLNHLycZ:rDN76e9d1FB2Ri8Nu7RQ+bErXMNecZ","tlshash":"f172d01fe03fcae75642b57360292eda0d29e00a3d32fd61995d52c107804df6ab7acc","first_seen":"2026-05-01T12:35:49.732445Z","last_seen":"2026-07-08T11:42:54.072948Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.794Z","timestamp":1783510932794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 723\r\nexpires: Mon, 28 Jun 2027 11:42:12 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vYj2cJefCOviB%2FsxyaElbMNflTf06kifS0wkwr9IeWlp5T8WWamlUO6wuoqih%2FzIOh8ETQ5TTOEbWmBQoy1fIqSVOMrn%2BCNHel28OtT4oap4PrJ2hDw4sOepaN6Gkv3qPpmfriy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a17ed3020ec27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19723,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-18T10:34:43.827407Z","times_seen":54915,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/31.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.825Z","timestamp":1783510932825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/31.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:12 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpZG3iS4MJu%2B3jJNsuDhVZXSYvv%2Fkr8nRaEWAzr%2FsyYJ7gZr4D4nYuv77Vm%2FpfqT3xmh6Ptn19QaBNDJ3ujuN3Ex1VstUzG8s0u6zJw7Jqe8tFU8HTb7h5%2BkTTGWS29JxOA26OmEJQ%3D%3D\"}]}\r\ncf-ray: a17ed3022ba6568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19612,"size_decoded":20292,"mime_type":"image/png","magic":"PNG image data, 326 x 200, 8-bit/color RGB, non-interlaced","md5":"cea87270d2d8a6c2fd1b25e6842dbbc9","sha1":"dc0c2b13e6b5b1ed2ac7a0ae907c8a8258906e87","sha256":"427b834f48113ce06000dc4cb4e4d3296616ed863b33870f9f6bc42191064922","sha512":"1564cac426e1762ad712ecd0406395b93018f9c2a4e2264ed26c518f090f7b730d390081fcb9c6b597e1f466962163f7a56534c9b4d410cd2a0edc5e0b406428","ssdeep":"384:EwYore2Szap/WwYQ3jx4j6GYID6eC+3DifsjVz5sFJS/:1VH5hYQ3jxhGpjN2Ji","tlshash":"a092bf6ffd77f9998e400355ad594a93ec0b930144aec993e5c896cf044fe8eb01dba2","first_seen":"2026-07-08T11:42:54.074562Z","last_seen":"2026-07-08T11:42:54.074562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc/dgb/AgentJaneMaxVolume-dgb.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.857Z","timestamp":1783510932857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc/dgb/AgentJaneMaxVolume-dgb.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 19683\r\ncache-control: public, max-age=5184000\r\nlast-modified: Tue, 17 Dec 2024 08:44:38 GMT\r\naccept-ranges: bytes\r\netag: \"ff52e7e75f50db1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=_d6Oi9S1ZdLQYEF1yItgAH5TzufSkPm1d8D1EWsvzNk-1783510932.8710036-1.0.1.1-PoXwR3Q6IfzHvBAWUNpsL2WgSrm6UOxCrWNWPsNMTa8BKVUmpPw6df6KjQrCqbXEffVOIhHg1aclqklu4CCnoJmRsZxh.BQ3pxdxo8XB48uQ8n3P8o1kLAQaGhGEHHCy; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:12 GMT\r\nage: 2346969\r\nexpires: Sun, 06 Sep 2026 11:42:12 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed3026b8b569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19683,"size_decoded":20467,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2d37afe2820de6edfbd1a0bd664bc765","sha1":"3b0b6156b2fb24f35236bf69725409082cfa8f7a","sha256":"ae34d015250717d54268605d39e7e5d7eab5f542447fc036c436a78271ab35be","sha512":"d137ec6ca6fa46482bb1c2dcea29e49bf107e1b8732120d003376d03c31dc1c801e2c01f5b2b29eec09c91fb8575b671e3ef05384e7a0c34b952b03d461e7ee7","ssdeep":"384:8DCzKpnN79bkoi5z19JLfeq/gMNPC8aosv60nPa8yFkJArxy:zKx7QV1ramClooPHsY","tlshash":"3f92d082373668edd1aeff709fd9ab2f80e1d3658bdb89545d446eb00ee45b3a014481","first_seen":"2026-07-08T11:42:54.075602Z","last_seen":"2026-07-08T11:42:54.075602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/logo.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:14.051Z","timestamp":1783510934051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 02 Jul 2026 20:57:46 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:14 GMT\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUdfDQy994Me5GSsbn5PQv7UnDJ5KGbNq7YDml41PnY5IAVSLo6RTZOfV8Ko3Bnpd0PZX7cjD1r54sbLBwvTwgFfpRUGj0zoPFsx40EqyntXK%2BtyG3B22F4tp16jX89E4KvUeoK3ZA%3D%3D\"}]}\r\ncf-ray: a17ed309dbee568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":48258,"mime_type":"image/png","magic":"PNG image data, 474 x 212, 8-bit/color RGBA, non-interlaced","md5":"e118a8348f52343e580ee0a554d3b90c","sha1":"bc2ea2ac213f9c0987c5af7a80755fea38f79be8","sha256":"f816f6d1e40ea43aae3d378ef28e94e50f3915a2c52eb35475d4c7aa2c7d9963","sha512":"c1b225caaa97dfbea1f553d5c65b6dc28bb336b8d1d85c1678c6b7cd98b4e86001be1ff8038344ed130674c5345a83c3cf20a2bb996df62ebca21d7d57dcd30e","ssdeep":"768:2BKm+yqvz+YgC+OL+06LzHYshUFnkott3WHIMSlsEe28P7nbG6xZ699SCKgk1GRW:2mR+Q+ORqHh667IMktq7nbGiy9/KV+0D","tlshash":"7323f12867a06174ff40cc0712bb1f7b613454fa2992047fedd08ac9eda6cfd789a495","first_seen":"2026-07-08T11:42:54.076736Z","last_seen":"2026-07-08T11:42:54.076736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/08f4c146-7eca-49e1-0026-3f2c4b1d3e00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.419Z","timestamp":1783510936419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/08f4c146-7eca-49e1-0026-3f2c4b1d3e00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19664\r\ncf-ray: a17ed31898aa5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2266597\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfMV-w7WtDWtBQNsFDZU-5_U61fb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=40+116 c=1+50 v=2025.11.5 l=19664 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3319B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19664,"size_decoded":20376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a3cb22b0d91de9b8d0006db09618811","sha1":"082ad68b022c50624ab64add8bd05558180ed0d7","sha256":"28c2e124aa5f1c5d6f964177f085c32e942175a5741d9ff4e06d89b308e3c5cb","sha512":"646cd3fbf11dfefa988d459225576888ba01f8fb606f336ec4169dcc013216c4294626341f14d5967d4604d5043821df50af6b33f0cd25e12ed798ead075fff9","ssdeep":"384:rzUxZ0VBJ5d4j16UowdNjmrw/oNMXhwCaHjUfizAFwwntr7u6wxT8i8t:0IByoUbPowbXh14OizAOG7uPI","tlshash":"a292e157f0d82a40d327926097df3a24cf053e4ed1d77c04a5278f62ba808a4bba9372","first_seen":"2026-05-01T12:35:49.698457Z","last_seen":"2026-07-08T11:42:54.077845Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/d36b106c-35d6-4560-34d2-ca1bde859f00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.434Z","timestamp":1783510936434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/d36b106c-35d6-4560-34d2-ca1bde859f00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 31633\r\ncf-ray: a17ed318b8f25ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1979572\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfgJncP0h5gd1gpBkXIwHRPJoVfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=152+47 c=0+0 v=2026.1.6 l=31633 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31633,"size_decoded":32286,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f27a2bdc90e31b0fb86c11d8e54796a2","sha1":"1ed5e52fb7a6419362270e2399043df0b22538d9","sha256":"f8fbd09f91e3a2250d0ff830a8cfcf09e82bfb3b7bde26e68435e891a2b3d8db","sha512":"94db221d91c6288a00e511da259ca593937b9fd2eaa02cee9615b8241dc48c2e645821959d65417f4b2cd03f81ae014a5ccfd9d302d2e0ec704d3bd00c370c9e","ssdeep":"768:JyIr//1fEWt8OyzcptirwJNfs/vvFqi6b3Yr:t//1fp8hzc3irwJ2/H8hy","tlshash":"04e2e111a7de5f01d09893f1c49eca26fe2488673e6a9a03fcce775d4024620d7bba01","first_seen":"2026-05-01T12:35:49.702233Z","last_seen":"2026-07-08T11:42:54.079215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/35.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.830Z","timestamp":1783510932830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/35.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:36 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEfbig4SY6j3Juwz9EQcdWLGKW6CG4ItIDk1MaFmCfTj5GWxduHJKAYXywmgavx1BsQUmztXGbb%2B2jMO0PgGhUh2cLkO4djVBMb%2FZrfGZbtgv2cn1VKhmj2qsWRBPUK9aEBMh4H%2FPQ%3D%3D\"}]}\r\ncf-ray: a17ed3023ba9568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6328,"size_decoded":7003,"mime_type":"image/png","magic":"PNG image data, 300 x 200, 8-bit/color RGB, non-interlaced","md5":"50f0d1fb04a8bbd013f58b793fe45b7b","sha1":"941711ed171cc70807f58de7f5f62541874b8060","sha256":"29036df713305bb32e54fa52ddfbcd1babb36a5079c26eeb60ed2534a1dd3682","sha512":"f418c348fdf49a7c73b5fc0051c86e863bff3cf60e5769753b79df11a2a444c3c3b69bfb04577d8a6b0dc665a5042a25d9660173f30959383e5cd343bcdf61be","ssdeep":"96:eSpQoD/mw1/Sc4Jyp6Zibrj969RcUJhFHp84r63ox/he64RCRNlu6sm/pC:eSpQoiKm+brjmcKFJ7Aox/hL4RCRNl9Q","tlshash":"dbd16d85cd37a21b6ca70a074cd7b51b1bee48c2569b5c00990cedf9add746faa9000b","first_seen":"2026-07-08T11:42:54.080497Z","last_seen":"2026-07-08T11:42:54.080497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/0b8b92c5-7234-4d0a-3091-159a6a9d4b00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.423Z","timestamp":1783510936423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/0b8b92c5-7234-4d0a-3091-159a6a9d4b00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11142\r\ncf-ray: a17ed318a8bb5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2345510\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfwBYZl8jji9bIMQunU-POAesWfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=220+199 c=0+0 v=2026.6.0 l=11142 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"original is 2592B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11142,"size_decoded":11875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41656bef743f8a4de03d4dffdda759fa","sha1":"625181389097284d604c19aacf1d61c4396d1515","sha256":"9186a251deb33b3dca0c27d9359e9923c0432bd1de877cf4c4fc018861b82a88","sha512":"7e3c0f156c2ba2df52cb4eea5294c90ae71900b48644b37a99cddf43f376ce2aaf6fb85b263eaa0b6b1c22bbb6e6d0aa7ec2239a60570397c9876e5277de87cf","ssdeep":"192:zsuxv7sE1SgHfyZqc3wQOMzpC//wshKLIhHpOVs4qVlVrWsqA2+ucgiT9g:zs8v4EvJc3wJ4s2IhJOUlVrWc2Kg","tlshash":"f632af58565dec9a4445b503049aff41a38ada7d2c0cfae752aaea2770cdf1701253a2","first_seen":"2026-05-01T12:35:49.704019Z","last_seen":"2026-07-08T11:42:54.081562Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/logo.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.818Z","timestamp":1783510932818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 02 Jul 2026 20:57:46 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bC24vb4%2FPPmSvw3rfsQ92JKuqeZFpvp0B9%2FXSfO9x3TqDvVcq9TDTheQ6mcPw6OYsVAxo3dvLt58SgfYGh4K2XSkWEOl4QFdFvO99kS%2BdzCRbK0ew97rwEnbIC31CeH1J3a53jQ5ww%3D%3D\"}]}\r\ncf-ray: a17ed3021ba4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":48252,"mime_type":"image/png","magic":"PNG image data, 474 x 212, 8-bit/color RGBA, non-interlaced","md5":"e118a8348f52343e580ee0a554d3b90c","sha1":"bc2ea2ac213f9c0987c5af7a80755fea38f79be8","sha256":"f816f6d1e40ea43aae3d378ef28e94e50f3915a2c52eb35475d4c7aa2c7d9963","sha512":"c1b225caaa97dfbea1f553d5c65b6dc28bb336b8d1d85c1678c6b7cd98b4e86001be1ff8038344ed130674c5345a83c3cf20a2bb996df62ebca21d7d57dcd30e","ssdeep":"768:2BKm+yqvz+YgC+OL+06LzHYshUFnkott3WHIMSlsEe28P7nbG6xZ699SCKgk1GRW:2mR+Q+ORqHh667IMktq7nbGiy9/KV+0D","tlshash":"7323f12867a06174ff40cc0712bb1f7b613454fa2992047fedd08ac9eda6cfd789a495","first_seen":"2026-07-08T11:42:54.076736Z","last_seen":"2026-07-08T11:42:54.076736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/33.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.828Z","timestamp":1783510932828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/33.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:24 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYBGyr2DTWYL6igRG0jNwVK5PeRp9%2FKNsaYG2IjQg%2BDXCDyy3yzfDme4Cht9r6gR6ImBPZcHDavuEy9mD90JBEGf%2BhgQY3LZhfU3uSJzzhWW%2BW0AHgnpCwiyOLgUL4U3Tu6Dgbv48g%3D%3D\"}]}\r\ncf-ray: a17ed3022ba5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5403\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5403,"size_decoded":6082,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGB, non-interlaced","md5":"629de55dfb79f453a5fd67327abe9abd","sha1":"e5a139e230a9bd6bf1529db6ccc1a7beea0de854","sha256":"5f7f49bb0e614d63b7568d1b6a5ff24718643b017874851ff06fbc2fca194686","sha512":"353afaf855f1b303d5ba6a4ac669ebd099db3465c637bfb7355a0f9f7c0db68a1edee33b65b66fbd7448940a454feb7de8dd499fad6e5656bfdded425ffaec70","ssdeep":"96:eSyPRX6iYkFYoyybD06MNSPigvy682OOfcsu979QEEns4o3ZYuFwKXPL6y:eSyPRNuX52OOgpr3OwfLH","tlshash":"72b16ddfb4020f16fe1ab0747edf36bf83d016ac8da65814429116ae87203d163ab563","first_seen":"2026-07-08T11:42:54.082741Z","last_seen":"2026-07-08T11:42:54.082741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/39.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.835Z","timestamp":1783510932835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/39.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:54 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkwnE5wN%2BI3iI8oI%2FPIyfqU1rUYhyi5P6S%2FpKQakOxW3o32LqOLho0NaQPmf5lfXKmuMcZFO0LCDO5m6ASU24p6Q5ZSKgk9L3xjgVeG%2BueVlSVvDPA5CWYpYQzSkHCMO%2BwMLuPWbug%3D%3D\"}]}\r\ncf-ray: a17ed3023bad568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5590,"size_decoded":6269,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGB, non-interlaced","md5":"c2ac3c9711d0aefdd6f54b88154c8643","sha1":"a552245e2cff8a66c67cb92dcf98c7c6d033e598","sha256":"d869b79b178da50ba34ea80c65e542a2f294199fdd8c0e6ddfe632e091a018d4","sha512":"87309fee5590a929ce0ec7ffcfe89d065c3f249c931d33dfa8aaca78d1a2796187000ce0714273a5dd9e2069ddbce55e61b9d8f1de1ee69c094f887c8e0eeddd","ssdeep":"96:eSwCSuuuuuuuo09GSAdwAPKBJdUH/LtpX3cI+5UlbPV0/bOJYVs0Orw7bfnjfbn8:eSwBuuuuuuuIP42oINbV8OJYy0OO7zch","tlshash":"14b17c8b80b4f98ca1ee8f6b104b1e18ab205feb0f5e57340c554490be76a14e40d2bb","first_seen":"2026-07-08T11:42:54.083756Z","last_seen":"2026-07-08T11:42:54.083756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc_ca/sgb/dragon-shard-640x640.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.852Z","timestamp":1783510932852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc_ca/sgb/dragon-shard-640x640.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/avif\r\ncontent-length: 98980\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 03 Dec 2025 11:00:13 GMT\r\naccept-ranges: bytes\r\netag: \"65c9f8ff4364dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=YLFP29TbFyqR16IWuxZ5x0ZT5CwRNMgrDfApE12PHAU-1783510933.0854325-1.0.1.1-cpumh_x4lt4tEEVDtl8mxvY51ChX5OfgbIGUhXeGDb9MsqksN_0UlpSVG2w6iW6qHfaq96kdMDkWYyorWooynPJe5DFEZYLPwXtB3wuCKxiAosiJfBstzl3Fxt0Qz_GS; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\nage: 2346972\r\nexpires: Sun, 06 Sep 2026 11:42:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed303ccb0569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":98980,"size_decoded":99764,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"87b5f9341886d672a44846b4d8b81724","sha1":"631557170bac2af0e1130477548a90f7ba4b832e","sha256":"b74509718a3a75911a608b907796ae752b0120e201ca25583c70cfbccabf6a15","sha512":"8db594208e0459689cc5121974e4d2370efd45daee83f9ff6615af16c56996b7ee46d2352e321e4836b23656b8f8bbd3d3cadee0b8db77051dd4e61dc9acdb2c","ssdeep":"1536:wibqj3HkpDn8qMwMGUnWPuvdPxOFv6McT80eLlkHAMIpIzfxOvnH:5beXWDn8+VOWGVP2vInWpUZOvH","tlshash":"baa3029ac46a02caf655036cc19de2878d1c3be5965a3c8d7395e7c0071ff29bb723a1","first_seen":"2026-07-08T11:42:54.084877Z","last_seen":"2026-07-08T11:42:54.084877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":12,"receive":1,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/1beb3deb-c334-4098-6d8d-33f43580c800/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.375Z","timestamp":1783510936375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/1beb3deb-c334-4098-6d8d-33f43580c800/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 213668\r\ncf-ray: a17ed3185fc15ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 948487\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfRNeA4vZ8ww4suHh0cyy6gGDDfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=521+289 c=0+0 v=2026.4.6 l=213668 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"AVIF anim not supported\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213668,"size_decoded":214400,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc2e7679ade80fed89f2f310d7360ce","sha1":"96cb40064b543f20d5ee8650ea9f9893368e6db7","sha256":"38fb879e60bcfdc0ff9f5dcf2f846b8d51225ec0e240e4549048e52cf59aaf31","sha512":"a3dbbde9fd453612ac4bad8ddd9f1d9587db291352f0d05af8375dbb8cf9a10c46f3b6c84c2f1680dce7d7d8278d245dacde261726fa409ce4496ef4abd865ad","ssdeep":"6144:drr9er62xX38xtNzPFWaJc8sy8LkXTa4tO4KO0:dVOjNoh9cs2SbfKO0","tlshash":"84242215a3a2f319df253912be55188bbc67e84feeee7e3f347676b30895163a001640","first_seen":"2026-05-01T12:35:49.680968Z","last_seen":"2026-07-08T11:42:54.08602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/5dfb5010-b7bf-4998-5b2c-92f9734b5900/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.396Z","timestamp":1783510936396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/5dfb5010-b7bf-4998-5b2c-92f9734b5900/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14360\r\ncf-ray: a17ed318883f5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1987226\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfpq8OxUW2wClB_Z9Del5ymaR6fb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=73+196 c=0+0 v=2026.4.0 l=14360 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"original is 3599B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14360,"size_decoded":15092,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ab727c11123418e5a52b8e2f4482b75","sha1":"d6df9c30790fe81b446f60434920d384a505436c","sha256":"4ceabe99efd892e86e09b9c8df4be3f0152ec45cede73502d9586aad51dbb174","sha512":"2ce60fa59d2b2b5d52cda08a8d7f32c9a5176d6a09b6ae78d76f3b69fa71007f44a8c11d0e517fdf5c12e64d52ef555f6474e431a3545756cc5106fee35f9fdd","ssdeep":"192:j2YNMtKwfkQTfLfi+8vZpiuqaBN1Y7MH/MQppf6stAQ9abseohzQEoM7kvM1ZZAG:SYNg7fNipP3ls7MUQppf6sqoiEfhZCTg","tlshash":"9352c0b9fa05d5e0d229a7b4a1b1b3f210ca117943163f535868d73122556a1fb8c5ca","first_seen":"2026-05-01T12:35:49.726462Z","last_seen":"2026-07-08T11:42:54.087244Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/aaa45f50-7c3a-4511-ff18-0236547cf900/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.431Z","timestamp":1783510936431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/aaa45f50-7c3a-4511-ff18-0236547cf900/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 445312\r\ncf-ray: a17ed318b8df5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2279726\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfNX6P-_7rXiSKeRXDIgOh0Tykfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=22+189 c=0+0 v=2026.1.6 l=445312 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"AVIF anim not supported\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445312,"size_decoded":446017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46472f5d94034dea420c71fa850e5624","sha1":"4d0a308720e0e639a85fa9b439594e7bf78a6803","sha256":"21d6152f362c9e9e5c26f5eb806611c91de077bbd7c7bc7953236981619ecbc8","sha512":"8d22ed3cc2a5a8f3d1f4495ea9696282321b11ff23e69b947a52f6f01288b47d88e20d93fbab77406dcd6e52313ff9f0dd6c164a55f1485d65f8b5e23bb7653b","ssdeep":"12288:w8bDMSE38pmiX0ppqlx1QzKhv7ohMYVlXTJp:w8boSEMph4MfvoVxJp","tlshash":"d89423adfa626d93d09786f90ee4120ac1dbc50ec5360a3b18e4bc7135a61edfb712d4","first_seen":"2026-05-01T12:35:49.734607Z","last_seen":"2026-07-08T11:42:54.087955Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/34.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.829Z","timestamp":1783510932829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/34.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:32 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfTVQOLKFG62JNWy6iB8g2UL8DGTCj38TwmKSWTfHf3FN1PucrpAZxp8GBcSAwCSfdnCPZbZEDn3JyvNxyUz2OwgLz%2FCPC3p%2FcMXPPpNHybLVDj4m8t4Z5WMUKgE05h0GtQF0cjmmA%3D%3D\"}]}\r\ncf-ray: a17ed3022ba8568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77963\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77963,"size_decoded":78637,"mime_type":"image/png","magic":"PNG image data, 2790 x 1029, 8-bit/color RGBA, interlaced","md5":"1994ef4717d1e811e7ab85c0bd736399","sha1":"b5fd4da29dc7a755f7c55a215aac1916c0a24480","sha256":"2f7140766938f2f006b1ff4787f74884076a38dd863ae34408b2c4528fd572ee","sha512":"b572766bee5d0bfb3d3dd8c77d451489dfa2bee33d31afc7bdc245deb00f4b349ce7c7afb6e535b454ccc72b61c4dad8a53789908ca20c074ca8dea62b96fe2d","ssdeep":"1536:DQK5qjIixDHjzKAxouIvEo3zeL5W0tRBDo5BDPmo+Rn:Dx5wVDzVoJvJDcNRRqV9Mn","tlshash":"b773026ce1202513ca0c1efbb3b74272f2752db483940d395538bdc5957e8db25d2e6a","first_seen":"2026-07-08T11:42:54.089146Z","last_seen":"2026-07-08T11:42:54.089146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/41.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.839Z","timestamp":1783510932839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/41.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:18:02 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKdYSZ43LUpNIFJoLz%2FomO%2B4ePDYHW9z9ITMEECB0po6FSvVJs2nTaEsWZoijzKX7eh9Qpa5UMAeAkgFBfchGD98u8YzYo3YILaZ0qGja7MEBzVsz3mZfkiV6CWuleGml1mfdROBUw%3D%3D\"}]}\r\ncf-ray: a17ed3023bb0568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4470,"size_decoded":5143,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit colormap, non-interlaced","md5":"c29ce3085c99c0d89740edc9737e5f41","sha1":"aabe81cfa43c5889f81aa83ab4590e524ba192d5","sha256":"73a5974a79e202093befc0063def24ce2390b8210c105273b7d45b0e7d487a7d","sha512":"94bac929675f9bd0bc343a841c87144a4302b9efef51dcebd30f5eced3c90bb7f637ed82930a72ea9a2a7f62919264ab534c41e036b22483f44c989ffab702b6","ssdeep":"96:fSThEG+HHC42VmtibS+pl0wrlriYbLmC3fhUJnKV869lPHX7O:fST+fnC4ril0Ylp33fiKC6DHXi","tlshash":"a3917eba76d5665121501605d3f2aceb4f4675544ca32c2a33bfdc39d911c270f507d6","first_seen":"2026-07-08T11:42:54.090662Z","last_seen":"2026-07-08T11:42:54.090662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/3_hot_chillies.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.848Z","timestamp":1783510932848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/3_hot_chillies.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27326\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:01:06 GMT\r\nexpires: Sun, 27 Jun 2027 19:10:18 GMT\r\ncache-control: max-age=31536000\r\nage: 923514\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=08VXHr9ELXtKy4N4GQw14Lcu.mYoaI4pf0LNEksdf1c-1783510932.9475641-1.0.1.1-0oeMeT4SSX5h9EUqqBr7RzC9Q51BH_j2liLbIed3X8VHXq8RmAQFixmgNEmafHGfEpqoZxfgOY2XIR8ao1jDK.poqjy1VNcmr2.7I1K5zQQZkeiLPBIrO3NGracv6_cL; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed302e8e25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27326,"size_decoded":28051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cb5ebf0287bd059eabe7f6c3702dd8a","sha1":"6bd11691fe91c8b59994f4e25228e40477cba28d","sha256":"9375c958c58fea51d7bf2f4906b6853494f15e3d23c8bead30046718759aebc7","sha512":"39f517f4b7bf3def03dae089ef4452ad6d185318524bda23cb3ef332c4798024fde293e45efa05f405fae45104d2b5e23d7e3aeaef7bff227c8f9c844c440974","ssdeep":"768:4LFSt3OKb8FbhryDQ7ZCjWGtFAD28D2MH0:+SJOKGQDUZCC28NU","tlshash":"ddc2e14a449511ff085e97cabc9659e7ffb6166fadc43f2fa004e0381e5c4a099213ae","first_seen":"2025-09-17T15:38:41.956786Z","last_seen":"2026-07-08T11:42:54.09184Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/e60bbfbe-ad6b-4b03-b7e6-7c26f73abd00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.395Z","timestamp":1783510936395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/e60bbfbe-ad6b-4b03-b7e6-7c26f73abd00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13122\r\ncf-ray: a17ed318883b5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2095871\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfV_RcqeH2ZdVZQ2S6qQ7zvGMtfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=7+41 c=0+0 v=2026.1.6 l=13122 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3239B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13122,"size_decoded":13825,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0fe6506ef5575e508efea9e0180dbb9","sha1":"bd4e980b5e2338d79bbbe301f0d8343bcb8a8e87","sha256":"170bf3a267c8237c27d809248c97eb52e967df5375e8ba69e766ad028f5b9c37","sha512":"798911aa541ebf6f1dad5b19743fd8348f0c5ba27135cf049e9820d8952dd65be3daf1977202cc9a46085ff688e6c1c88c6a444c4c918718f91daebd73243401","ssdeep":"384:n9pLx3kNhhYGXl6KAPdd2Oi/+xK3uRGscAJF:3LgXAKi2Oi/+aO","tlshash":"1e42cf8d1e08f941e877f2c48f14c954d6bf382c3b1252cf260634be97a6e44d920a81","first_seen":"2026-05-01T12:35:49.690905Z","last_seen":"2026-07-08T11:42:54.093273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/34646bed-fa95-4f88-9e2b-1682f38e2b00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.413Z","timestamp":1783510936413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/34646bed-fa95-4f88-9e2b-1682f38e2b00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11598\r\ncf-ray: a17ed31898885ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cf1EEs4mPj4tDPOASkvPtqiCREfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=52+129 c=1+41 v=2025.11.6 l=11598 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 2505B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11598,"size_decoded":12296,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f017b858fe22c395be889f7d6abffb0","sha1":"8c48670fba59adf665dfb77b35339205e02d5b36","sha256":"f5c1755f3bd5aad1b2e696d4ee10ae19a474b28501f60cf0cc710daffb995ffa","sha512":"a2e5f4539fda2d044bbe2428074dec3ec1f3f377b0bcc4e3b937e365b98311a486904678c15742349306561a1cc363f243ebd7ad39008b22f5b7c7b664dcd9e8","ssdeep":"192:MA2TkiZ4phFGjKtM4dpqlh+WZZYTELgjHFPqoIPmKavei/H65eZoFQY5pj5+v:MAKp4ph3tM4d4PZZYQ4PqoKaTP6UPY5e","tlshash":"6532c089b2ad4e905e6c2c6206de6074163fd77862b9fd1d73f1a88007c323ca331e92","first_seen":"2026-05-01T12:35:49.696554Z","last_seen":"2026-07-08T11:42:54.09451Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/37.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.833Z","timestamp":1783510932833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/37.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:44 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJrYKMuHjG8sKMoe0%2BUppV4GX6B%2Bb5egF1k7MdZ9Qz5caLKlENkAd4YxEE2i0vO3rinN2PTfrr%2Buh5vDlrAhg2yCakI8%2BezFMIAmVALZfY0il09urHgaaqTV0SE56e4wNzo0T5mvaQ%3D%3D\"}]}\r\ncf-ray: a17ed3023bab568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4096,"size_decoded":4773,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit colormap, non-interlaced","md5":"d56b6438d11108b34c5cc91d4b04eb47","sha1":"7c7a4999f8ea8b660407b79bbb746561ecba5ba3","sha256":"f1cdcf082dc10698aeb45ab1afebdf0d443e6d80a7302df015d2539baa941c7f","sha512":"f84987b0c207721321fc2241366ee3418d6b96a28bc9e55fec21a237aa6bcbe0ec157ca9e44fcee58c12395f83400910c3ee6f2394523d7bcd3512ce0ae288a3","ssdeep":"","tlshash":"06814b7b63c488e7e289a2fbd4a182d49bdb1678b9cc8a1671b11719a42e8613766103","first_seen":"2026-07-08T11:42:54.095653Z","last_seen":"2026-07-08T11:42:54.095653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/de21a0d8-5c65-4937-cc8b-ca2973b9a400/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.422Z","timestamp":1783510936422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/de21a0d8-5c65-4937-cc8b-ca2973b9a400/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14056\r\ncf-ray: a17ed318a8b45ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1946857\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cft36orfPitdKtVnyBn_engOT7fb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=140+129 c=0+0 v=2026.6.0 l=14056 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"original is 3725B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14056,"size_decoded":14789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f787fca9a187b89f05d1e682ab25a26a","sha1":"7e61b0b2814a6fb5733c4a49140cba2eeed87bd1","sha256":"0e7358404311168f34272fac1893e484cba795f76b7b4641ae37ba86b53e0e92","sha512":"f90cf2d96c4817351a5b01faea681df86f5dcfec27fe6cc5ce54119342baa9dca43e350295614ac584e5da997df06d74ef64ad6eb4aba903a911c1af48734996","ssdeep":"384:akECDJtFInpVKEys7vEgPCweBo7uhxIbdRwsB:8CDdIn72D+7uHad7B","tlshash":"8a52d06f9496360d12782e3c9d2c60fd85dfd428438bd94516b7c86f34bcf550206afa","first_seen":"2026-05-01T12:35:49.700277Z","last_seen":"2026-07-08T11:42:54.096808Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:42:11.949Z","timestamp":1783510931949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 02 Jul 2026 21:04:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncontent-type: text/html\r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5OHeROFpWgErHgZJXvmBQWwyzRCw8b8mvnHe7WziNc421zO3V2Lw6PakMOHdskPc4R0TieAyok2if7tXjE2QLNj9Bxa%2FX5ZCc%2FX2%2F5u3dhFxiRvz1oEmBmqKQQRPEpJrN4xRv0L3A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a17ed2fcdb75568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":91580,"size_decoded":21121,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1017), with CRLF line terminators","md5":"cb0bae90d9a0bf5aef33c193ff06b0d2","sha1":"7b5cde5947bd4b2420564776af553c07aa4c4746","sha256":"fbd6ae339d1edcd2004d1433b695518057990b82b7ef4e028b416d8e8f3e67b2","sha512":"fdc2fcdd4875c6d215ccb072a35e11076cd8364250a77815f615cde4e5515a6c2655a815305bc43d052acac12562dfa1a2a923d45dcc16f4e9891f2ca1817b94","ssdeep":"1536:BUlArJk37+zv0AYtxRP02dDmqMGtfbY7oDM:YArJk378v0AYT4G8oA","tlshash":"0393a63a90c03637017392ed9ba21789ff694143c60b5168bafd538b0ff2e948577a9d","first_seen":"2026-07-08T11:42:54.100374Z","last_seen":"2026-07-08T11:42:54.100374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":11,"connect":14,"send":0,"wait":543,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/62b56c73-fffa-43e2-0c3b-f26fd218ad00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.398Z","timestamp":1783510936398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/62b56c73-fffa-43e2-0c3b-f26fd218ad00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11980\r\ncf-ray: a17ed31888425ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2492083\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfJbT3eiLTb8M04seGtCY3GbdMfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=540+130 c=0+0 v=2026.4.7 l=11980 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"original is 2058B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11980,"size_decoded":12713,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"216ebfc8c7985fe361d0608470d60767","sha1":"716e601dc79bb398cf2ba7ec3fcb2c9307830c69","sha256":"f7b378d11ad7e2cd4d8be1bf96a201577519e9cce7435ecdb9c85ebcb93b2399","sha512":"a55f9b6aa436945edee14f00b515ae39f157a7787f75f33a71780ddce50807a1d2387816ee7e2472193a06ec534ebb14b3192a17581ce253e4761207dd1ec4cd","ssdeep":"192:AiYdRZSQ0wgUqzwKBUNVmuPj9oVSmIgYGO0JVOldtyDV:AjjcQ0wyz1uPjyVQg80JVGdtyDV","tlshash":"7632c05638dd758460ff4f267ace14fbe09dd7a22c65098439476e11827ee8a01ecc35","first_seen":"2026-05-01T12:35:49.693683Z","last_seen":"2026-07-08T11:42:54.102336Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/dc887dbc-2f9d-4071-3b5b-a0741df5c500/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.402Z","timestamp":1783510936402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/dc887dbc-2f9d-4071-3b5b-a0741df5c500/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 20273\r\ncf-ray: a17ed318884e5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16402\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfANoppUUFhM3F-Ns4t0O9p--Kfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=13+80 c=0+0 v=2026.1.6 l=20273 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20273,"size_decoded":20923,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0d1207a496be61d9d2c3c582f85e2c44","sha1":"59db541ef2358fb8104945d63dcf131644a0ab48","sha256":"a481fbf9f8e324f9c1415da7c86a45e1198309e4ba288716b9d14000b9c1a1af","sha512":"c975e695bf19452419eff6a35d5dc7b08d0467560f5a40acf724bae1df1634a1675dbfebc9a770c77ebbca34846b06c5f4c7e7cdc04a9ff580cc0009011b084a","ssdeep":"384:lv/HnmgWic74X8mwINvQynKCJ9tDj6c7X2U0JanPByx5cGlI0yizBu+MWVCbtpfs:lXmgWF4X8MvQ+KCdv6c7X2UzpyHTAL+D","tlshash":"0892d129b882343ac5fa0378d2348cce41471f1695551c5bb124aa7e92b4fae2db78bd","first_seen":"2026-05-01T12:35:49.745416Z","last_seen":"2026-07-08T11:42:54.105287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/MightyWildPanther94.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.843Z","timestamp":1783510932843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/MightyWildPanther94.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24198\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:02:16 GMT\r\nexpires: Sun, 20 Jun 2027 08:35:22 GMT\r\ncache-control: max-age=31536000\r\nage: 1566413\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=OViOxXbVgmvR0qykYA8IrLDxy.eTmpk_tziVGm.ev5E-1783510936.3017912-1.0.1.1-mohNS2LQH1Z6bpH5QQ8uMufy7qxAEqEUx3idR6p_NU4z1ndO_joTGBnuRdYGHWg4AMzzRVktNRXl0uZHUVLxUjxYpRtYo3iH351uZfC7LnqerJh0PRVL.qxaye91HoTm; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:16 GMT\r\ncf-ray: a17ed317e9d41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24198,"size_decoded":24946,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"530487b65d8ed00c9f9c2321b9720201","sha1":"741c09abb2dcb86eb1cfee93f568fdbcb0a66992","sha256":"4ba1c700e96d1c6b669636bbc1475130fe70d97e01664fdac087a43fcd20009b","sha512":"624361ddae46c64322fffb13f3bc8bc4eae6e517b3efcdee60aacd00a650b6d0f9e5bb3466f3052a158811829b8419b7b8f7dd93f6c4160e19573d4901581eb7","ssdeep":"384:IY4MWjASevFD2HZ0l/Hq4PSmi+5ITXOsFtTM3B6vLJMajwRjF7lUSrZBKnDhvLU/:ibWIHZ6/Kdf+5UX7FtYxGJhQFldZSF5W","tlshash":"fbb2d097ba3a089df2d0563dde7e807c535c3727c5618ae070c0574baa1a797e3d58c2","first_seen":"2025-05-31T06:11:20.45021Z","last_seen":"2026-07-08T11:42:54.107551Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3514,"timings":{"blocked":-1,"dns":88,"connect":3,"send":0,"wait":55,"receive":1,"ssl":3361},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/LionGemsHoldandWin.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.846Z","timestamp":1783510932846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/LionGemsHoldandWin.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30944\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:01:33 GMT\r\nexpires: Sun, 27 Jun 2027 19:10:18 GMT\r\ncache-control: max-age=31536000\r\nage: 923515\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=zcRBojteAK1zkwIL07VG110XZdOe7IMl2L9nic7lugI-1783510933.1623824-1.0.1.1-3lnIkPHS8aLojeLmUj0ylzV9LXrcJPNu0RLnAw7JUvonXqjU.QZJtpSwSAjZwHm7Nu.pjA.IB9dC2p2yLOe.5jTsWxeGj._HoXSNECnfV2aK_f4Z6CvPh_jNS0ABHGK7; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed3044bbc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30944,"size_decoded":31691,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7b180f7e62852c9b4f509276dece6ed","sha1":"d07a941ea768f1183350a4c2b40e2e74d387e985","sha256":"d5dedc92b54a259434f0fe0116a9099a9b47458162452216ca2e65b4df00c3b6","sha512":"e8c908c6bbcd74824527e5dc75a81bd537c86cae61709873d50fba2ea270117ef159c10f971a5bdf26244123fcc3b2affb2de8c0474712e7e59b06f124bc25d1","ssdeep":"768:1VwcESA5zV47O2EDW9/9w1MC54paRwZF8nSb3:bwcZA972I4/9w1MCKpaaZFkSj","tlshash":"acd2f1661ae106cfce4e20a71b06b53f7b4599a6d6e015ce85c45bd7748cde0ec026cb","first_seen":"2026-06-15T06:56:18.850541Z","last_seen":"2026-07-08T11:42:54.108965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":85,"connect":2,"send":0,"wait":75,"receive":2,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/15_dragon_pearls.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.847Z","timestamp":1783510932847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/15_dragon_pearls.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23488\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:01:23 GMT\r\nexpires: Mon, 05 Jul 2027 05:12:34 GMT\r\ncache-control: max-age=31536000\r\nage: 282578\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=SoXai35oItOLwM69uWNEQPd_89v36YOrdwQe3qlUihg-1783510932.9470918-1.0.1.1-px4GZfgGHTt8cXiX437m9rgiegcQzdEr2GQ9x2Gh7JfLCeVswjE3gRNxK5OTrD_JnPwYvTyPsARGikF.P6jebBJ21oB.h6ZZ7iu8v0MW.mFjEYRV8oq0NfnUNzalfrlq; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed302e8e05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":23488,"size_decoded":24213,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf6d0f967ffe93dab3bf6f3d1b4477a6","sha1":"47e4473e1f11a587a488bab7b548e46c4c960c2c","sha256":"dd576d6cd91a698f1718c7d56af52cb7e04cb669fc53cd1b393c9a7009e0e140","sha512":"5df5bf2170bcce13781415a90a92850252d4490e2229d093e4ce58d954c2594a7d4eb5cf4431d3cdc9e2ed7c2ed929cea7d7c6a49f5ff336cc2f7897e28fd97f","ssdeep":"384:YvAtaQ5YOmGF6+OAInEbJyAucs4TOfTa3lRgKoxV17jfUbEcJUHD:9tHXmGFfUEb7u94TOangKo3Nji2j","tlshash":"67b2e1181c8bec46ad7976ecda2c2fa25cc2d4b36f7f0c686b43d106959d1c52f605e8","first_seen":"2026-07-08T11:42:54.111031Z","last_seen":"2026-07-08T11:42:54.111031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.imagethumb.com/images/jpc_ca/sgb/mask-of-amun-640x640.avif","fqdn":"dm.imagethumb.com","domain":"imagethumb.com","tld":"com"},"ip":{"addr":"172.64.149.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.854Z","timestamp":1783510932854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagethumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 00:58:08 GMT","end":"Sat, 26 Sep 2026 01:58:05 GMT"},"fingerprint":{"sha1":"4B:E5:D8:A8:9F:26:89:71:D8:9C:72:B3:01:3A:CA:A7:18:D3:1C:0B","sha256":"9F:3C:D8:60:AC:D0:D2:BB:49:B3:34:8E:74:51:A4:68:CB:67:BC:B5:5C:46:02:F9:33:75:01:37:EB:84:4D:E1"}}},"request":{"raw":"GET /images/jpc_ca/sgb/mask-of-amun-640x640.avif HTTP/1.1\r\nHost: dm.imagethumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/avif\r\ncontent-length: 96837\r\ncache-control: public, max-age=5184000\r\nlast-modified: Wed, 03 Dec 2025 11:00:46 GMT\r\naccept-ranges: bytes\r\netag: \"f3d7e1134464dc1:0\"\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=HPs8KojdVCA5OjoW7hFcgMNP0CnGWKuaZzBbNZUV9K4-1783510933.0753975-1.0.1.1-bbnPhc9CVUsX2ZPprCIuEDuajifB6vmtDP816xmvb.ocNLHTAIjI8bE0MYMto66.zkLFmTy6PlU5LUlJwzBD0OX1aIzcuxzFmu9C6Ze3P1WmUnC_xghdOfJC.WsKECMP; HttpOnly; SameSite=None; Secure; Path=/; Domain=imagethumb.com; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\nage: 2346996\r\nexpires: Sun, 06 Sep 2026 11:42:13 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a17ed303bca1569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":96837,"size_decoded":97621,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e8d354ed152b57e8aee18e894b16a075","sha1":"64da6a5f2db4b2ea9d78325a87a2fc2cfdce2e64","sha256":"04dc39222e618a00145ce5f2c5132f8a2517155e403f4a905c0aa59830ab4e72","sha512":"dde33dec5bea730fc4ec6c1b110f9de154dbe77657cb6c2ccdc0a717f42a1ef1251f569120cd43d59f58e78a7e409efbfc2e3a427b89e2d014b75b0c629170d5","ssdeep":"1536:GTdO80JJ9ygrcBeG6eEHIS7SyN5z5QM1Y7Up/ErHkJ1sELMw0eBxLTx3Oh:wSJjy9eG6hIS7Sy35QQYo5Eow/H8Tx3c","tlshash":"a5931203b892321baf251d7941e0836834de15bc95ef06b03f57b2f2d2b56607ad65bc","first_seen":"2026-07-08T11:42:54.112405Z","last_seen":"2026-07-08T11:42:54.112405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":14,"receive":1,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/5cfea6b8-b1ad-4bc5-8063-37aac1cca700/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.370Z","timestamp":1783510936370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/5cfea6b8-b1ad-4bc5-8063-37aac1cca700/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13994\r\ncf-ray: a17ed3185fad5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1693298\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfiE6Ek3kWlODo15jfKlLYpym0fb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=21+113 c=1+34 v=2025.11.2 l=13994 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 2821B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13994,"size_decoded":14706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbb9a50baf060ada368601cc644db3b8","sha1":"7ae207816ec2260cc41af51ae674a4fc4bcce43f","sha256":"16128f1d62a134c6cce7eabe942a8f6c3195422272d93a2ccd42ef32695a96d5","sha512":"e3ccf9186f8f4c04050b466467d69928778e85d127f08cdb0b6fa7e0bfa7ae2c0c55cca5f524dea907e7244b72d7ca652817991f5d3fbed953c81d0663aa6336","ssdeep":"384:ggSsBvIDBnCAKf5wY09Kvqx2J9w0pMFwn/nYIip0Q6D9:1jlAKB77GqMFwnQP6D9","tlshash":"2f52e1903653371fc23af404b967d58d6b373012c9da32ba434b92ae3e17be9d94a543","first_seen":"2026-05-01T12:35:49.706214Z","last_seen":"2026-07-08T11:42:54.113647Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/25444c51-7cac-4635-10c7-7e2b47421300/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.418Z","timestamp":1783510936418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/25444c51-7cac-4635-10c7-7e2b47421300/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15270\r\ncf-ray: a17ed318989f5ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1986807\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfMdN7tvNoqKUs2XBHS4_azNzNfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=6+65 c=0+0 v=2026.2.12 l=15270 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3202B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15270,"size_decoded":15974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4791d0eca24917be4077fe37c2a59f3a","sha1":"ab14293de80ac607222dbae8ad5a39525bd6fa85","sha256":"6621ab34d68da40c5fdf81102fcf347bb0e1f4415fe2811066bc2a4fb213c045","sha512":"4eba24c7399305c43c6cf5457467626fb568bf4f3908d99e22087f641d189f32e195a17d30a6b13ff312e3ff74ee981a80fb7a3c2f6098859006fbb1a00c8fc4","ssdeep":"384:tYNg71UAIPJGyPybxTDVw38ayWUgX9TawDJMZUD:tYyiAI8JNVu8aygX+uD","tlshash":"3c62a095df39826aea7bec3870f07f722583b6388762e395d52bbe050592601550d0db","first_seen":"2026-05-01T12:35:49.743371Z","last_seen":"2026-07-08T11:42:54.114918Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/WolfTreasure.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.850Z","timestamp":1783510932850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/WolfTreasure.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23528\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 08:59:37 GMT\r\nexpires: Thu, 17 Jun 2027 02:24:03 GMT\r\ncache-control: max-age=31536000\r\nage: 1847889\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=CxaT9EMun9PlcclP4Hw4U8JzuwElBKY2.n5AOHurPf4-1783510932.9480686-1.0.1.1-LgGkpRZvd20YHNE0cxBH3WJ60Px0q78w8wTL9wqcd8pwwHg_f.sYez5mpXY3WRxh._pVNqFlh6vpY_oZoOaTBFY0bJdoNJ3ltequwFReTwifVw6A0KtTca7SmfOcUZ7Q; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed302e8e95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23528,"size_decoded":24254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"141aae13b50480cdda205b56cbc795b6","sha1":"dc3b4676a6e03d9b60e2ef938757503a53f7d3e4","sha256":"8c1f34af11cb7235b9ecdcb1c829404a44fc622908421394cef380f7c00f55e4","sha512":"34edfd56e1dc1f891a6b00ae2afe0f12546779a78196367fff543c5a2a0b6ed9b2eefe608b3a2f21fd820b91544f234d17949657e6361fbaba6f4f6b479b8820","ssdeep":"384:OoGYU8VfnNWJyqyoeQVPw63PGE2Im6N58vW2aGBGKv/o99aL70/gB7/e27:a7UfNQewPw6OZ6Xc/v/cYB7/T","tlshash":"f1b2e1a8c97a9cceeae3027cd73c5dad6555623759cb0d876007c574620bf42e9f52c0","first_seen":"2025-11-12T07:11:28.63134Z","last_seen":"2026-07-08T11:42:54.116058Z","times_seen":5,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.809Z","timestamp":1783510932809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230118-FRA, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2099306\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWFMEOGC4NP4%2BbYpnKg2l11zw8yYMxfGpjcuQy6AANnfgC9xHdk0mJ8%2FvLNnl6Qf6LUbT%2BeWMvSbu%2BWE%2FVCA5zQt2%2Fp1FZtkahIvWCo8yf2ct5O7ms5QSCWmUY0HohAFHYg%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a17ed3021fc732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25594,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T10:46:10.949158Z","times_seen":20626,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/DivineDragonHoldAndWin.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.844Z","timestamp":1783510932844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/DivineDragonHoldAndWin.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30748\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:02:07 GMT\r\nexpires: Sat, 03 Jul 2027 22:23:57 GMT\r\ncache-control: max-age=31536000\r\nage: 393499\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=wIkYBGe9jhPeebVd0zGMbjkf2v2cW6ppoaxfeomU3fo-1783510936.291106-1.0.1.1-9eoobKK7cCZYsgOE8cGo3sBAtLwsJ0BuDgAj_sr8jbRxrGfoQtD_QnB36qTOukaJMaSWEUYNKnuB83wGuInS9qc9wkCAW.i192sSZoJC0PneLaEEht8tah92LD3S2FVV; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:16 GMT\r\ncf-ray: a17ed317d9771a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30748,"size_decoded":31494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd8918777d314c9485ea6d69d3110629","sha1":"c7cb46171e990201e556a8c0f663800e99bbc04e","sha256":"561434b0c5fe8c16e72b3f196dbd75e9086f096dd804dc61bc9724c1288d449c","sha512":"ae400992108d81d7eb6b709ee9c7bb7376323f5b8753d4855af33af51894dba6456e0beb90fc322ccff8d49e2cbcd87d319017487dd08d4046551b2e18213acb","ssdeep":"768:GgH19Gccv72e3bkqnh2EzVYjiPjdaKlpBkUFZLm:GgXGBv72ern2MVmiPjVKUDm","tlshash":"17d2f17f2b4fd0a3e82176a5be7f30041c3ab036570aabd99e682e148c54b359c29759","first_seen":"2026-07-08T11:42:54.117862Z","last_seen":"2026-07-08T11:42:54.117862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3510,"timings":{"blocked":-1,"dns":87,"connect":3,"send":0,"wait":64,"receive":0,"ssl":3351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/b276fdbb-9ff4-48f7-0a9e-f2516eb61f00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.400Z","timestamp":1783510936400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/b276fdbb-9ff4-48f7-0a9e-f2516eb61f00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17438\r\ncf-ray: a17ed31888475ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 57970\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfa7O7dyBYnxUkzUkZ9wuRhaWGfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ram/- q=0 n=0+0 c=0+0 v=2026.1.6 l=17438\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"original is 3383B smaller\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17438,"size_decoded":18131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2597a62307218d4607fedfc2fc95816","sha1":"baad4b3821f2b8878ab06905ddcd8218e98bb333","sha256":"ba85f34adc303f176592b2c75e6be62e10674521b14f975654c64c7c4aa8f76a","sha512":"75975a588f401c41635d1817fb74c0b33ed56af3b3e063294e150c107afd2936c2fc2a8fbb8f6bc118275b87a5b1ec6e02fa068f306dd5e1e32ca1011a035090","ssdeep":"384:xLixfbYa0hONfSX2sRQd4hFK36MWVp9X/cKmgK+6utZb0dWxOy0:IV5WOhd4fjMqp9kKlx6GZbO3y0","tlshash":"0c72e1116ea51a7aedb5b51050acb45e707c01eebb47a30f4e057e14a6f34eff0816c5","first_seen":"2026-05-01T12:35:49.728341Z","last_seen":"2026-07-08T11:42:54.119277Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/X25LPXdafsr4DfjczTQDzA/795babae-ff61-4748-8911-1a776a79d500/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:16.436Z","timestamp":1783510936436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /X25LPXdafsr4DfjczTQDzA/795babae-ff61-4748-8911-1a776a79d500/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 20936\r\ncf-ray: a17ed318b9035ebd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1405105\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfnp-BeKAxGm79GiBFWMccQCylfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=34+61 c=0+0 v=2026.3.3 l=20936 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20936,"size_decoded":21615,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"13efa32055fbde52cbd823155799401c","sha1":"2d3637ae123c7b8f5db4a63599599998abd0a5b9","sha256":"3f8a18e2e355a4a84cff5a4fdd54dea0e562dd9ff9174968d349b2629dae8d28","sha512":"d1362cb308db8cea1a1f46856ce11eff476c418122c6d367ef21114f1445b286f56722654dce4a9d52f91902badc1777e6be2444a42951c5cb37f0de67f858b2","ssdeep":"384:dEuLrOdkg8o1vWZA7LeUgqLFv41G44l/z13Nck0M3hR5vlJ6RLjfJuB:dEkrUeo1OZA7LjgAFv79l/z13NXNn5vt","tlshash":"c492cf39fd50062cf08e27f51c7bdccd4c94884c8666dcdb8a263a16f69f5ae7924229","first_seen":"2026-07-06T17:12:26.432007Z","last_seen":"2026-07-08T11:42:54.119919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/grab_more_gold.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.842Z","timestamp":1783510932842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/grab_more_gold.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16708\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:02:26 GMT\r\nexpires: Sat, 03 Jul 2027 22:23:57 GMT\r\ncache-control: max-age=31536000\r\nage: 393495\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=mq06hbjYO42lh_Xc.XAawq7AsIY2BvZmjck0G4fOEpI-1783510933.1519232-1.0.1.1-m.dZaRiqg9GEDhEsqjyco_tO5rR8Z4QyvcIC_6oJAoYvdQeDBmi87O41Bm0eepjfqNPo3C9zvtw6VYGk.YQSRK9CM_Gty40cq99KeagLeOoN6.zK7S6v.HNeAPuIGnLk; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed3043b761a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":16708,"size_decoded":17455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0271b441b4f91ce9753e9f9b96728700","sha1":"fad333b1a901d55a5fabb6c7e817a8858a10eec8","sha256":"9d0e001cb320cbdb9118a26f4dc1c9e2b8402e85ebda2363e5f6a0e8557ad724","sha512":"487daf757a9c1f0f60bf4ef34ed0560c2cd2baf5c6280153b7bd21ce29290a37e049bdea7a85dd9337779c2c1c0a0e1c900c9ac8457b760b1d5ec6a9acdb2f9b","ssdeep":"384:TGYIk0vlfmJh8gt+N8eIbCEsDQbDXwfKLuT:pPOfmJh8gtZeBPQbDgfH","tlshash":"5372df2706853e129672befd33b794375c2d88d862b06aec621df74aba9010e15a17c5","first_seen":"2025-12-16T17:26:58.296751Z","last_seen":"2026-07-08T11:42:54.12096Z","times_seen":7,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":89,"connect":1,"send":0,"wait":57,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en-en-us-rainbet.com/assets/images/40.png","fqdn":"en-en-us-rainbet.com","domain":"en-en-us-rainbet.com","tld":"com"},"ip":{"addr":"104.21.59.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.837Z","timestamp":1783510932837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-en-us-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 18:23:19 GMT","end":"Wed, 30 Sep 2026 19:20:20 GMT"},"fingerprint":{"sha1":"27:7F:EE:5C:04:67:83:A3:E7:E0:18:69:43:BE:35:1D:FA:10:1D:14","sha256":"4A:9B:48:61:88:32:05:18:47:D2:37:14:48:21:90:65:26:B3:3E:A4:EA:2B:FC:BE:DF:32:C6:86:7E:A7:A7:D4"}}},"request":{"raw":"GET /assets/images/40.png HTTP/1.1\r\nHost: en-en-us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 21 May 2026 16:17:58 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ae2JzUo1vZl%2FoAoUJ2JBKxARsHjZBojoQ0WQ3jpWWUCbaOTq6ViJI7Jn4O10RnNIZfyx2jbDq4dB3zmhTyOCJFF9SAkruIZwmI92BGMoIvwn%2B3ebbsYuYESQknMjqP%2B0aJSk8uDaOg%3D%3D\"}]}\r\ncf-ray: a17ed3023baf568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9186,"size_decoded":9861,"mime_type":"image/png","magic":"PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced","md5":"387de6bed6f0ca84d98a8197f9c7b84f","sha1":"b211595f7a51d240b84d4cd4def1644a21f1c808","sha256":"f75e2a50c766914804605148e5851680d0edaa3aef1ed034c4a84717d6d268eb","sha512":"c54384e6a72d27c4132cdcc0e28d92d73fd82b31e1d0e222e0ed835a444680f579c33cfcdc0dfa1976a7bd991a52308992e896cc8021c64de5c908690cdc6afe","ssdeep":"192:tQD+RSL+K41ztzy2reMWgvoHXbbOTVm92IxqqT01wAiY6mRZH1bF:6DaN/JWcSXnoVLI7TKwOFRZX","tlshash":"1d127cf7501bb0064b0a7ab2bf85a0c81f33299db7516a9d2c64b943ea773e1761413f","first_seen":"2026-07-08T11:42:54.122105Z","last_seen":"2026-07-08T11:42:54.122105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"en-en-us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/LuckyLadyMoon.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.841Z","timestamp":1783510932841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/LuckyLadyMoon.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26490\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:02:34 GMT\r\nexpires: Sun, 27 Jun 2027 19:10:18 GMT\r\ncache-control: max-age=31536000\r\nage: 923514\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=5oR.5M2TX9dBE5f3ppiONyirXvTNkSP8cRcEa.0._XQ-1783510932.9468226-1.0.1.1-aFvz7U5fIl62hwclPUN9y9oN1fAT1NDsBJKeqvh7NTayGltBNvRmDk6B5rsv58KynginbUeZf38uuBE60jdy77RdcncY6CfgjEhpH7odLWg2SIDbmUED38sA6UEn45Ep; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed302e8dc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26490,"size_decoded":27215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f800663a75be7dcabba13131cfb93e6","sha1":"b27665caf372bb4c6f6daa6f96e79cafb0f48171","sha256":"e87de887954e7dfbe5443c8b4d5b4d75eb63a2a7dd286a4127e1d99a5cb5c34b","sha512":"84b6b0ead0892167a45d5303ddf4d186a6276cbcbed30b64991a0246ed17356d809a0934643ab22124b5380dc7e16c1379982c70b69f4f968e3936201b85efd3","ssdeep":"768:JIxo1as9ozC/QYtiD19y+mvwuqXr1nT39Q/:exoAeQYcEvwtrJTu","tlshash":"2ec2f168df58bd64c2517db45e380572232a13c942b0aa6d84704bdeca56f9ccf7c16e","first_seen":"2025-01-31T11:01:31.886152Z","last_seen":"2026-07-08T11:42:54.1236Z","times_seen":20,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":90,"connect":1,"send":0,"wait":60,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skycrown.us.org/wp-content/themes/sc-crown/assets/hot/3_coin_volcanoes.webp","fqdn":"skycrown.us.org","domain":"skycrown.us.org","tld":"us.org"},"ip":{"addr":"104.19.154.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en-en-us-rainbet.com/","date":"2026-07-08T11:42:12.845Z","timestamp":1783510932845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skycrown.us.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 17:16:06 GMT","end":"Sat, 19 Sep 2026 18:15:52 GMT"},"fingerprint":{"sha1":"85:A7:27:4B:4E:84:7B:AF:BB:24:32:FC:D6:4C:94:70:F8:7E:9A:66","sha256":"60:79:66:01:3E:9E:21:89:A3:F8:06:CC:50:62:21:C1:21:63:BE:D7:47:EA:E4:72:3F:4F:8F:0C:1F:AD:9A:7F"}}},"request":{"raw":"GET /wp-content/themes/sc-crown/assets/hot/3_coin_volcanoes.webp HTTP/1.1\r\nHost: skycrown.us.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en-en-us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:42:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26420\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 09:01:50 GMT\r\nexpires: Mon, 14 Jun 2027 07:12:26 GMT\r\ncache-control: max-age=31536000\r\nage: 2089786\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=fjv_5Uw6Cz59mkD6vqBV175ct39Oqczw8a1jGr4GR.g-1783510933.1628447-1.0.1.1-t5ww6bOVflROEBnn4M2S52hu_oOzm0W41o7LFHf8xw5pqEep1w07GaVEhkJQtQxQH2s4OvYSFpgQLbCW6UDGuUuSB5NNXW6_TrXtT.evYYVh5NCbwCmjL6dd0DvH5Q8t; HttpOnly; SameSite=None; Secure; Path=/; Domain=skycrown.us.org; Expires=Wed, 08 Jul 2026 12:12:13 GMT\r\ncf-ray: a17ed3044bc01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":26420,"size_decoded":27168,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c392d1f69e85a59f6a2af467c99285f5","sha1":"9af3145f0d84361904985da965f950ed5189b20b","sha256":"31144e9de03a68aba520af42d65f1fe355bcc8141e4d452e570bbc0c37cd7f22","sha512":"1cfcb3b16067688b2f81cf7c26ef3ada8c2d84d702899f24f27ecf6ab9f7793103fe023bbd0ff389d67aa7ece29ae41b25266bc10ed7352f06fe76a1fc527980","ssdeep":"768:R55W/q/xUz2FCs/ShKttL4yahSiSHH95Un2:T/xUCrSetL4jS1HH9V","tlshash":"03c2f14ed183498fff1cf070f114fbeacb94262316e0db426cb9f9549b382848a56899","first_seen":"2025-12-17T01:25:47.751209Z","last_seen":"2026-07-14T15:01:34.212615Z","times_seen":5,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":86,"connect":2,"send":0,"wait":44,"receive":2,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}