{"report_id":"a3508b85-5fdd-4b7c-870e-32a8ea9977e9","version":0,"status":"done","tags":[],"date":"2026-08-26T11:28:36Z","url":{"schema":"http","addr":"rainbett.bet/","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"172.67.192.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbett.bet/","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"title":"Rainbett – বাংলাদেশের সেরা অনলাইন বেটিং ও ক্যাসিনো প্ল্যাটফর্ম","dom":{"size":83517,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2485)","md5":"26e20c94d4bee8c69e9f0e0454e92acd","sha1":"6b6e885e07443d7965bb794f1c2c858241066ff4","sha256":"7256eed16647ac0900d2fa5baeb817e936b91bb03f4d538c12e546a73c400685","sha512":"02488e3ada40788baedb61b171c170aef9427fe0c17b319283e15db56ef57a51906813b5be48effba7c0e79c7385c86ee42cc9366fbc84317aa5214a459bbbf2","ssdeep":"768:zn1NzaT1LPHDlVTZlZqt6/Yz0y+uwnFBkCyo+ywv25/qIMDe378pamfsanBivTyx:zng1Lxm24D2wpa6sangvTKGIl/","tlshash":"c3834230d4b9603390a3c8c56b10576a6992de43cb1bd708bebe5b846fdfcba9c17548","dom_hash":"domhash4108d4bfbbe97e6de6a30966d8690308","first_seen":"2026-08-26T11:28:39.85678Z","last_seen":"2026-08-26T11:28:39.85678Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbett.bet/","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"172.67.192.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:28:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":5876,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-23T23:05:01.76831Z","alert_count":0,"request_count":4,"received_data":532947,"sent_data":2178,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbett.bet","ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-26T11:13:18.405244Z","last_seen":"2026-08-26T11:13:18.405244Z","alert_count":12,"request_count":12,"received_data":1111818,"sent_data":6231,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":8,"received_data":357576,"sent_data":4544,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-26T13:37:29.34466Z","times_seen":21879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdc47c21a648f4b5b9e865fcb9572fd2","sha1":"5fe28dd8ee942f901be946a8bc3a5a3a100e0ec0","sha256":"9e373e4e9f813ac74c94933611029d00846ea27657bacce51e4f60d57c1f9c42","sha512":"fb62aedaae37caa5738074ae7299e388b2cc57f8c070849520eb91cc3e9fd83c50973c0b7e6dc6f33abb20720894b3e2b8c764c36abb131f9a009c4236884d29","ssdeep":"","tlshash":"4241dcceb98220a56963223b5f6f13043935a04b388ddc517e5ca080afe4a5d27ee7f4","size":1950,"data":"","first_seen":"2026-08-26T11:13:24.312998Z","last_seen":"2026-08-26T11:28:39.891261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/data.js","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33fba17c03a18101f03f8d15aad6680d","sha1":"8447f24bced915e6bbdca0cc9198a27c269753dd","sha256":"eefc3e445e6a8e9ca71a4c61123212534424037a127838a83e36dfaec895c9c5","sha512":"a212603339dacdb3992905e7e90c835e14a92de4cce3e6155448a3bdef2ae5c690370b07dbb5ab87b9b4340865c1b20bfbe78a955ecf4174f11a21a01d8f1fac","ssdeep":"192:C6/7AtIks0fU+RQsXW6yUSQQSPwHB8j2W82dSeedbbwOkpqcXh1SV2p16I:stIkLfU+RFhyUS+wHB8jV8qJOMxXh1FR","tlshash":"82e1533499e1113a5073e26b17eeb68d3177c01342469e4c7f2e92a95fc44eb0676ef8","size":6991,"data":"","first_seen":"2026-08-06T07:58:58.591189Z","last_seen":"2026-08-26T11:28:39.886754Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.355Z","timestamp":1787743688355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\nage: 1387057\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25235,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-26T13:37:29.34466Z","times_seen":21879,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/favicon.ico","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:09.011Z","timestamp":1787743689011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:09 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a8592b6-1ca00\"\r\nlast-modified: Wed, 19 Aug 2026 11:25:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEsUjq7YAWFk1NJJrx1oVUz3sO0Ne2Mxk63Ky6eyJHByv2ixQzgOC1BTlKdgbk0jVulgG7Ejtq72BqebLQsY%2FdVou5byRl5wao%2BP2eSi%2BgZkZugk3tLulgszNgbmrys%3D\"}]}\r\nage: 920\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3127dc85ebd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117248,"size_decoded":117945,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 7 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"c04b0e22b82625b290ff2bb076835e0d","sha1":"335ce83420f2ae7c3473db5aff47f72f1fe2bd7a","sha256":"a73b02b2882cb7c5919b6c1fc691ce7a964abc75bc49ee912110a65fd831eda1","sha512":"5eb2fbdbe11df4c26f3ceda509d5a90600a470e595e2d5b154f6c74d51d5b8c4a478c25e7098d69afc3b259bbe6dd686b5253ac3c391e8a22f55b93ba7b18d81","ssdeep":"3072:Np3a+CYUNd1oOSsch7KDTScw6x/+dNquM6Efmp0ry136:f0Y/vh7KDTHd+zRM6E1GK","tlshash":"95b3127736b36de2d4bfa4330be18b423d18e2982ed9910b08161e5c42b4be774f2155","first_seen":"2026-08-26T11:13:24.305091Z","last_seen":"2026-08-26T11:28:39.861772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:28:07.347Z","timestamp":1787743687347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 11:28:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 22 Aug 2026 09:31:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmT%2FnXePd6uOB9RmBS%2BkKyRgJk7g8JgfFrS%2B9Ns1mt8FpGK68vU9ptcQwHk6JtiIkF29mBIbdqSiG3enuIvICrTqLX1cywCEVWiG7w3w9LzGaBQN2nZJc7BvuKqxXHQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3127dbe191656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":82176,"size_decoded":17526,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1495), with CRLF, LF line terminators","md5":"2764e8ce7bd8dc83ba3d9f4ef0475199","sha1":"50129f44ebfcbd963fc993efc21726368602f1e9","sha256":"a4d01f7f276369175a9f0d6877a4fc9534427fc7341ac35dd01c4d75b233e152","sha512":"501bc41a29eaa78146ebe6600927a97cc7495940a862923a7a92c710979a2660d1b9e9ca6d022c96fc00f312df9ca06e6c13c04ee32cd826ebdd9a2b4431101e","ssdeep":"768:JgAj+OBK5+0q81M8za+s9qjXPf0+rqQPO8Ve566wyi9XnlBCsoBL2c:z+OyMD9qjff3rqQPBVo5wJ9Xnl0sw","tlshash":"4f83fc309499243290b3c8c55b105769f8928e43cb1bd708befe67876febd7a9c17948","first_seen":"2026-08-26T11:13:24.267383Z","last_seen":"2026-08-26T11:28:39.864459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":411,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/logo.png","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.334Z","timestamp":1787743688334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 11:25:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a8592b4-3adb\"\r\nexpires: Fri, 25 Sep 2026 11:12:47 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 921\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX69YgHVzSSEDNz4hUMaG%2B1y%2F8NJEqPArnn9NqaGRAv%2Bd05nTy1J%2FueP%2B855iO%2FSIdOpG8h4iciB%2BFf%2Bur05cn2WMbFaIRVlrvdjgVa9Ochb82W2gm%2FbP4pL%2F0k%2Fh7Q%3D\"}]}\r\ncf-ray: a3127dc41e7f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15067,"size_decoded":15851,"mime_type":"image/png","magic":"PNG image data, 132 x 61, 8-bit/color RGBA, non-interlaced","md5":"8ba3af3896c1d2c423aea7b157f0c61b","sha1":"2da1e3843cb496f5bad76e65ab59a1430c007591","sha256":"a9f974f1ef4609283584d0dd592f89a5ebd07d9e1d19cde2a449938bbf908a13","sha512":"8e66c1383afa39d2cd934f5da6ce6ea6dd7a6160b835bf329d01f793012d67d9d0b8a4b4bae632dec52f007198c03ed8efc7397e28013931ed0170bd2eeac2ae","ssdeep":"384:Pl5NKHkdqNMoK/W+hWDBWkzp0F/hSQDYYqsZxpfoXKkXF1kvFYKk4tOZMvkY15:PlH6kYkWWAKVrZxpcKkXF1kvFYfMvr5","tlshash":"da62c0efe8eed0c685438b303d1a7a85375c8226733357ee952ff66aa60c8d1025055b","first_seen":"2026-08-26T11:13:24.280173Z","last_seen":"2026-08-26T11:28:39.866549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.729Z","timestamp":1787743688729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50uYVKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 12:56:31 GMT\r\nexpires: Fri, 20 Aug 2027 12:56:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 513097\r\nlast-modified: Tue, 16 Sep 2025 13:44:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14896,"size_decoded":15709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14896, version 1.0","md5":"3f586c48705ff89afb70a3835c2ec8b6","sha1":"13481d7d5e36e2e257191f14ad794791c3e2e032","sha256":"50c07c577a7c527c2d471089cf3473bb90c7f010f8dfa343a45cf9e81fb4c5e8","sha512":"f06b9b68b28da6b318c56c6c4f4b00d00a388a190eaa83aec617cff658dc5e64f5af04132350af33d9c9316f6fc268c8d2c88d4b4a61cd402e38e7929b62931a","ssdeep":"384:9n2f55fdy5GnT7PNtV4s7LfGwlNLuG88WvfAnFHD6dK4jy:Rv5kPNtVF7LOGOrfAZmS","tlshash":"7a62e0d6888a3cdc364d2034b85d1a3b2f29988e911b3be7ff5c64518274f98918a61b","first_seen":"2023-05-05T14:26:18Z","last_seen":"2026-08-26T11:28:39.868652Z","times_seen":582,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":20,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/rajshahi-cricket-betting-bangladesh-model-00817.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.347Z","timestamp":1787743688347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/rajshahi-cricket-betting-bangladesh-model-00817.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 09:30:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a229728-19670\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1o2frJMC3oo7VtY61JKFj19Dup5Wj%2FnujY6VE%2Bk4oxGyh76o6q%2F2NjtfGSX9zUCWjdDueEwQjhSzDWMvp4LADn5rUIWAOrua1xfMQm5AXX%2B9QVTVMN7UDKTQSNbzMOA%3D\"}]}\r\ncf-ray: a3127dc42e8a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104048,"size_decoded":104654,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"c872e9a74ba84f233b76e7524923c00b","sha1":"879645a9d031c17811f73f39352a2167678fdca3","sha256":"6bef0ec9954947436e7f49b8f1cfca3104ada5136f03d56749c70c2fb932a2a7","sha512":"5134bf0a5236775cc181cc286f4755d8f68f6ea5d0f503d0038a4f604ae94ea2a865c1a83c7f15c8f43374a2696b53d24b037ad71ab32c953ab5aab4834e7db2","ssdeep":"1536:mpeqihj4u7DdNFjqzGfXU2l8ggjJ15Ln/EeDOGo6R76pAD9gKgOXQ7zn8R1N9rSs:QeRhIGfclrb/EeXo68w2Z4czc9qo1syF","tlshash":"85a312a1b91497d024cfb0ff170cf93b3ec2eac996453949e48a2ab3fd451d865e40ad","first_seen":"2026-08-26T11:13:24.299055Z","last_seen":"2026-08-26T11:28:39.869857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0vQVKxGv.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.745Z","timestamp":1787743688745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0vQVKxGv.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72956\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 08:18:11 GMT\r\nexpires: Fri, 20 Aug 2027 08:18:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 529797\r\nlast-modified: Tue, 16 Sep 2025 13:41:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72956,"size_decoded":73769,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72956, version 1.0","md5":"aaff84f1d21632264a62608b312151d2","sha1":"55cb13867b419fbd61e295eec0b4ed29113c17a9","sha256":"b6033f70da8e37d5b8a3065b0eaefaafa6003f72309864b0eeddaa926eb472c3","sha512":"8d9a6f56c62fb388cc01f8ba8e78fdcf6db72c75c4ed4ea1b3100afd593ab169ecfb611e35ba5f80d08af9e6554037609d734e99324fd076dfd892722a0f754a","ssdeep":"1536:6A1439dbOaGWUnXUBoAIZkJusC2xS/kew5KZTq7hp1IHvyYdfUV:HCpGWUEKjCYz2KRycGB46V","tlshash":"cc63120fb313e9ebdf8014f9d139c81950959ef38d87c5db62daf5e887c01259262e64","first_seen":"2025-03-08T10:29:11.741433Z","last_seen":"2026-08-26T11:28:39.871479Z","times_seen":358,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.316Z","timestamp":1787743688316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 33186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\nage: 1368819\r\nx-served-by: cache-fra-eddf8230027-FRA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":33947,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-26T14:58:01.705408Z","times_seen":19075,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/sonargaon-cricket-betting-neon-00263.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.337Z","timestamp":1787743688337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/sonargaon-cricket-betting-neon-00263.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 09:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a229484-1f115\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvE1%2B%2FhiLN2Jt4c6lGShfbZAncb%2FDz6CdToRwTYAyATfiXdOyA3iFwlnEPBeyrxTOp0U%2F5Dtn0%2FuPzfIJOPYkro%2BmVykLm0aDZGjHjMbQDzLo2%2FLUhKrkelKcsu6Sn8%3D\"}]}\r\ncf-ray: a3127dc41e80712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127253,"size_decoded":127944,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"7d2a0e7ab6d5924ebc4a4b66362955c4","sha1":"c26077ce3cefc7c78eddfe306f1c5a2975f36645","sha256":"e78a833bdc7bb5488e2684df975207b85b57a242f0d3d7725a1c49f850d72933","sha512":"b846bbcfa188d4fe50c57d7d9f7e29c7364c2e97f4301eadc92fd6b071d887f5a0e98e2fb5bce6ba83c475380469c67997202719418b0febcacb9d980e062128","ssdeep":"3072:UirJs4zjwq1CkhqzhoBQnGkOVznPxP8SqwBm0qex/eG:UWJsWjd1Ckh+kFkOVjPC0/x/3","tlshash":"59c3126f1702af2349d83ec2a5df37ec967475608f628a64bdf9c717881c06b688c259","first_seen":"2026-08-26T11:13:24.282143Z","last_seen":"2026-08-26T11:28:39.873083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0uYVKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.742Z","timestamp":1787743688742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRCf_0uYVKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 11:06:35 GMT\r\nexpires: Thu, 26 Aug 2027 11:06:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:41:48 GMT\r\ncontent-type: font/woff2\r\nage: 1293\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14480,"size_decoded":15291,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14480, version 1.0","md5":"9f7e2d2b2ab53fcc30225e2d46c59436","sha1":"a1a9b25074ce18375d8a5c5d091a2238ae3eb193","sha256":"e8f0fc0cabf50652d414fcb76a02c6a21d6bcfc19adcfd14453088a9dae1d970","sha512":"9c2c0bb0d435dd383d8f4900a78d4c5bd6c7a9958f755178918fd5bde8017eb4bd34b5aecdbc5645f9d6bfdb86ab16283cd43b949d12df94200ece4649657ffb","ssdeep":"384:y1RaAxIRmmj3cPicHsLKeLhbR507yb+PMVZPQX:y1MncPbHsLZdbO7MgX","tlshash":"0552c04bcf46bb71ff47943121a6a6a9d8af62d0027bd030d9bc4b54e7916bd40c439d","first_seen":"2023-05-01T21:53:43Z","last_seen":"2026-08-26T11:28:39.874609Z","times_seen":706,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/dhaka-cashback-bonus-red-green-00137.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.346Z","timestamp":1787743688346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/dhaka-cashback-bonus-red-green-00137.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 09:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a2296ae-17bea\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iaSwAiZe9WCdYtByqPzoUB76oZfdZlLyc3NSKbqkXQGGl6w2yOzcXQa4yCCrzjC%2Bd%2BKcZ7ea%2FrvKB%2F9zujgtb4sdw4gUrtz4B7yVFiWniHsUzmJhepnjISbDBiWwiU%3D\"}]}\r\ncf-ray: a3127dc42e87712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97258,"size_decoded":97751,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"95be56989c2baae14f84c38fa0c83699","sha1":"d8516f8ae1c4f5b4b7c0db4ad28a2aa68623cec1","sha256":"a83022d36807ea95837171d2629855878f6104b9978c9d1b181188a0c7538470","sha512":"1eb7ad30978bc8596ba4a91e774e3f7249d0d986c748ab28e7089cbdeeb497ae7c6c7e07d451798800f34efc14948615c4dc7a36b2fbcda551b9bca603465d12","ssdeep":"1536:6Lwq13v1JJzAMK9BuFXuxv9wzgoXiQvBUWPTbshOOtftyCubKJFDWSuEsxZftyPo:E1fbJzA3juFXswzZiQvBUWrbETZuiFd4","tlshash":"7a931255092ddbe1669041200ebe43787c35e26b39e6bbbbd6ee9ddb85318c701f0c58","first_seen":"2026-08-26T11:13:24.307607Z","last_seen":"2026-08-26T11:28:39.875405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Hind+Siliguri:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.321Z","timestamp":1787743688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"1E:50:A8:26:86:57:06:AF:03:D0:36:74:91:62:52:AE:87:D0:50:0C","sha256":"18:6F:33:F9:74:07:4C:C9:5D:94:38:03:B5:86:40:07:10:6F:E2:91:F9:CC:9C:DC:92:11:AA:41:F7:ED:5A:8E"}}},"request":{"raw":"GET /css2?family=Hind+Siliguri:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 11:28:08 GMT\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5192,"size_decoded":1250,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d87b3091cb6ce26b8fec653e152afe4a","sha1":"50f52fca86c3b9786003dbf6cac8f044af1d56f3","sha256":"60ba69eb99438aacf02e74eb82a3d92eaf8c03dfd88fc2e8581cf42a1f8b0c96","sha512":"456f6407c2d4512a32e75e7b7d1dff2fa938fcf557ca8db30c36529b6831742a51e5266d2f98f2390ccb4cc90e99b9f6a691cdb78262e9e8214e4ec44dba15fc","ssdeep":"96:UOEaJOEaBJc+uCOEarNbOXa7OXaoJc+uCOXaVNbOxMaEOxMaDJc+uCOxMa4NbOpv:7GxKxjM5mNXAqcFnrB","tlshash":"ecb1c092042a9540eb473cc552cabe27ae1f32a06045edbd5eff18869ceac354351f5e","first_seen":"2025-09-27T14:21:44.762837Z","last_seen":"2026-08-26T11:28:39.876692Z","times_seen":29,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/mymensingh-rebate-bonus-pohela-boishakh-01075.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.338Z","timestamp":1787743688338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/mymensingh-rebate-bonus-pohela-boishakh-01075.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 12:10:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22bcc0-161c4\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVGg0Bj4oQPjU06JLnafF8cFJqBR588iIBOCLPFqDOsr%2FEswCmGQd7G%2FTMWTigUSx29Ad9qu0aBuuNelRjyEsei0pG4ojLdSUm9oG%2B3ea0VZ9rTi1gdeRyDGx7EV2to%3D\"}]}\r\ncf-ray: a3127dc41e81712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90564,"size_decoded":90627,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"0e618dd9d31200bba10461c9b5426e6a","sha1":"c148311c6e0ca9a18f42a238ed43182d7f8e39c6","sha256":"2364dca21bbc47d105de3be120980416670b53ce66e08d8b40d48f4bb1ba8726","sha512":"15f30ef395efd5ef768e43a23ba4f984991cd1e9c58ae14cae1bf17a04a64a5bed4ddf0194285d63ac1685261569945e949cdb35335bc7aa600072bed0b55f8a","ssdeep":"1536:HCfDQA0JnQpCUylakTuheyaA+qr0ZwHtA9nV/0eDAvxQUPGVKqfgHcTpKHXQ2lRo:ifDQNQp7Mc/aFqrq2ALMONUPGbgHccHE","tlshash":"14930160570b05b7ead4fa854e1af67a2f5ddad0c60dbd6710d11f600ab0beab91c2c2","first_seen":"2026-08-26T11:13:24.284008Z","last_seen":"2026-08-26T11:28:39.877538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/khulna-cricket-betting-pohela-boishakh-01189.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.343Z","timestamp":1787743688343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/khulna-cricket-betting-pohela-boishakh-01189.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 11:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22b732-1c36a\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ntzzYKuN3FXNlc2L77FlvPUY1XllRwggMQ%2FkjVMb6k9h%2FHmuAShJiqCGHrXtOhZj9VbPNpvXf1wnqOgfk1JLltyJQe2I9KAR0MikzOyUS8dEogEAfoGAgeXfQRO6N6o%3D\"}]}\r\ncf-ray: a3127dc42e85712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115562,"size_decoded":116126,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"e2fbc5fe749b81049b6fa0b726ac1866","sha1":"491aa41289ddfe42164ac71fcaa5dfd24c4f4a64","sha256":"a54cab5a28a8a234004db71451921a25b76f849be5096c965627c3e98b04af49","sha512":"f57d4555b56991c1771d218e11d03c828567c5dafd7f035f11019486724e7255ea23e40b9035cd2bcfb5ad12575c7acb7be3eed9d7d1628c2f91e7b574128755","ssdeep":"3072:IRGHg3vovI8p+NidjtxheWWWnNMYeg2d2:Au+ktPeNcNVp2Y","tlshash":"bab312bbb6fe0581accfc912e69f346db6c3d4d8601f7ae90352a64147407801e8fc98","first_seen":"2026-08-26T11:13:24.289313Z","last_seen":"2026-08-26T11:28:39.879678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50vQVKxGv.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.731Z","timestamp":1787743688731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRG_50vQVKxGv.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 09:40:26 GMT\r\nexpires: Thu, 26 Aug 2027 09:40:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 6462\r\nlast-modified: Tue, 16 Sep 2025 13:44:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73688,"size_decoded":74499,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73688, version 1.0","md5":"a18a941b8c4cabf5092bf178b8377dd8","sha1":"eb39bdd6bfb7a228f447dd408a14742c7fd23220","sha256":"7f39fcb7fe45615aacae18c5f34e6da557bf8ad1222b1568402e1e2d80979038","sha512":"6c0ac86ab1489415a7d2e05f83ecda2207c665a6cc183b2def88ff7e09e7153298d8659deb987718de472dc8200cbc34c78733c02439265e355a4080de6cafe9","ssdeep":"1536:EI2m9m6GDujU8BwMn7kOgHFfA1k99jz9mzyM4FpPmyJZ4H4hLGKpfHci:EI2QmDuw8BwzFfA1k39mOM4Fpnz4Yhsi","tlshash":"cb73011a3e87a0d7ffb6a5e9a76043410611b70baedbb227068025307f5530b96d7ac6","first_seen":"2025-04-27T15:20:40.470957Z","last_seen":"2026-08-26T11:28:39.881162Z","times_seen":210,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.740Z","timestamp":1787743688740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 130396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"1fd5c-Agw8b5KAoxXoQl1/kuFbzQzdobI\"\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\nage: 2982795\r\nx-served-by: cache-fra-eddf8230043-FRA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130396,"size_decoded":131124,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-08-26T15:22:57.478976Z","times_seen":16780,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/cumilla-cricket-betting-bangladesh-model-01717.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.339Z","timestamp":1787743688339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/cumilla-cricket-betting-bangladesh-model-01717.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 11:45:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22b6cc-24ec8\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0N1asPDI8oQQTWAReviHye4ZiTprp%2FWqM2Y3CHtpC%2FMjduS5Zpc5zRMxySfYnTbaaJ5a2GSVM6eLgZnU6avO2xBAEBdMOtE1xFddP%2B5IKnSuO%2Bu09%2BvxyI7UAWdrKk%3D\"}]}\r\ncf-ray: a3127dc41e83712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151240,"size_decoded":151883,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"3f68cbed452881473398f119b5af40cc","sha1":"58c1df99f6a22c31714f29191b9fb715c678d9ef","sha256":"def5acaecd259206d18da6d151d718295bfa0ff4db2aef9d025a4d6b807ab09b","sha512":"88e240a96b79d691789ca0eb60bec8ce8a8ff6d9ac07a7191b71bdd3989dc63b407c04a7fef475eb8848a606576dbd731936fa9fb2deb6e3be22c5ecee527434","ssdeep":"3072:DEclD5ZliLs2P9c4bOnTPuos3SPyX6uGc2omVYfx2qvJsYq:b5biLsx4WWtwyX8ooU46hq","tlshash":"8be3129a2fcd032ca65c72391c7e163865ce5967c660dbe30a10bcfae448cff2a57509","first_seen":"2026-08-26T11:13:24.285924Z","last_seen":"2026-08-26T11:28:39.882679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoREP-0uYVKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.733Z","timestamp":1787743688733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoREP-0uYVKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 24 Aug 2026 06:46:14 GMT\r\nexpires: Tue, 24 Aug 2027 06:46:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189714\r\nlast-modified: Tue, 16 Sep 2025 13:43:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":15537,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"fc4268e5177f6fea5ba65f17f10c7088","sha1":"b7fd5cb55e24cb84f4224021f84af53d70404b40","sha256":"c39d0db6f570276765a06728ce87d83be5808ae403475ed6b49a64c02915805c","sha512":"cdfa69b038fcfb08814c95aef16e2df9ba06bc888970523ae197eaf4dc81f6900a64db4e5965db0a8a047cc80a9d43af72c1a9d297faa150027687900882e7a0","ssdeep":"192:S7XZnGNOx0NP7Klg97LUm+/ffEgIiZFvK1WgjsmCJSCFmh2hkCmoq6ct9Um:SDZ/xhgBLUpvcKusmCJNmkhk3DB","tlshash":"1262c086b9d2de14c15104fd843528d204797fdf7420bfa89ea2a53d683da83b4cab65","first_seen":"2023-05-01T08:56:20Z","last_seen":"2026-08-26T11:28:39.883851Z","times_seen":737,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.739Z","timestamp":1787743688739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 18:28:40 GMT\r\nexpires: Mon, 23 Aug 2027 18:28:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233968\r\nlast-modified: Tue, 16 Sep 2025 13:42:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14472,"size_decoded":15285,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14472, version 1.0","md5":"94b8693233d1eb63780e108a1cfb5499","sha1":"357bdf1389b7da704f672297bcb90e1e4c070aae","sha256":"cdc41415f366ef2966fc77e90d51391dec03657a6ed397fe59efd5ce34cf9549","sha512":"42687544637180c7c432dd98d59780e9a0278aba6dc6e86efb36ef39e2d301b04710d320adc92c021eb4bf980650ee35efe7ab3c30c778c06dc099f05bdda6f1","ssdeep":"384:w3yTfckw2H7q0+0Tw0ud++DS/DvgIdDLQEww0FO/T:wCTE+Bj3ud+zgSkw4O/T","tlshash":"e352c1a8f0f5b911e969f33af5497f6a4ac1d04e22d218e7ce25d814154905b3f0e8e6","first_seen":"2023-05-01T21:53:43Z","last_seen":"2026-08-26T11:28:39.884597Z","times_seen":944,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/cox-bazar-deposit-saree-01511.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.344Z","timestamp":1787743688344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/cox-bazar-deposit-saree-01511.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 09:27:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a229686-19900\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWCguQHkLVTuL89oNn%2BA%2FO4r61jJVJP1Rz%2BZ4THyqqHEen%2BdGHtdxdJ7y7KFmSfNbY4z9F9mnFm%2Bck03mvrs7pwDHDGc%2FFZTfTMU4Vm8MxkIc4jERG1FHwMs1lQlVD8%3D\"}]}\r\ncf-ray: a3127dc42e86712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104704,"size_decoded":105294,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"2a086d95dd307ff80761bff62920a1df","sha1":"a43d25581e59c3f34b1ab650636f2fec5d03b0c2","sha256":"c079b2bfda3736f6a2800fa0bea203dcdbb338ecde57f814b0d0f2e3274fcad1","sha512":"425b311973f9522e529c2b513f52614dd55a5122a698a68ba8105cd55ec979f8a060cc1008396875d37a88753e295c5f10a27c2c63e9c07027d3ba54b9ded186","ssdeep":"3072:pBWJ1gvp8Zmrlv7TID7dAp3qJezBiPD5VXhrHzlBZiPueQm:bnxlD8DpJeUFVxrHzlkQm","tlshash":"49a3020b8635674139b93c85006cb69293beb5970d3b387f5041372d3ab0ac9d5bbb6e","first_seen":"2026-08-26T11:13:24.261673Z","last_seen":"2026-08-26T11:28:39.885399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/data.js","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.324Z","timestamp":1787743688324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /data.js HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 22 Aug 2026 11:24:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8986f9-1b4f\"\r\nexpires: Wed, 26 Aug 2026 23:12:47 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 921\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnY%2FKHlqAShqNHZtKCy8WlvnsEuV4IhBxCaDF9g4cqaXFtRQ5%2BD8cAQYADNp4YBGy9OrqlL3hFLMbXx%2BzYFWxtuIGwl7mjplT5%2FxnJnQzgkCgx2mz6xynmD58FREed4%3D\"}]}\r\ncf-ray: a3127dc40e7c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6991,"size_decoded":3140,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"33fba17c03a18101f03f8d15aad6680d","sha1":"8447f24bced915e6bbdca0cc9198a27c269753dd","sha256":"eefc3e445e6a8e9ca71a4c61123212534424037a127838a83e36dfaec895c9c5","sha512":"a212603339dacdb3992905e7e90c835e14a92de4cce3e6155448a3bdef2ae5c690370b07dbb5ab87b9b4340865c1b20bfbe78a955ecf4174f11a21a01d8f1fac","ssdeep":"192:C6/7AtIks0fU+RQsXW6yUSQQSPwHB8j2W82dSeedbbwOkpqcXh1SV2p16I:stIkLfU+RFhyUS+wHB8jV8qJOMxXh1FR","tlshash":"82e1533499e1113a5073e26b17eeb68d3177c01342469e4c7f2e92a95fc44eb0676ef8","first_seen":"2026-08-06T07:58:58.591189Z","last_seen":"2026-08-26T11:28:39.886754Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoREP-0vQVKxGv.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.738Z","timestamp":1787743688738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoREP-0vQVKxGv.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 74784\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 07:24:12 GMT\r\nexpires: Sat, 21 Aug 2027 07:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446636\r\nlast-modified: Tue, 16 Sep 2025 13:43:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74784,"size_decoded":75597,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74784, version 1.0","md5":"c68005dea382438e0adf9b6f75a1ad30","sha1":"b314b82f0a71894932519753cd2689b20e9af908","sha256":"b92b5da6d4f4f6de315f093f26a4e20d7ce7876a7db3ae7dda6a92fc5c3cc7c4","sha512":"e1d73503ab3c1dde396ad69ddbd48c57470ef57720a7c5ae841c8098930f09e2d36c50d050439d4eb9a5eb2674f8a979f93d00d9e2ffd56c6bbcbcfa82cb51a3","ssdeep":"1536:SrBL/1HQ7xuqikgWqby+E2+j1Z/P9bYzZQah49zrzSU/aU5:S9L/NaxuqNt2+RWXh48W5","tlshash":"aa7302df4d8e2e050ed84d50a6d1e988d444e4bf1b9756be3039cc51ade389aef00eda","first_seen":"2024-12-23T21:37:53.743957Z","last_seen":"2026-08-26T11:28:39.887543Z","times_seen":347,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTI7ax9k0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.746Z","timestamp":1787743688746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTI7ax9k0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 71076\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 08:18:11 GMT\r\nexpires: Fri, 20 Aug 2027 08:18:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 529797\r\nlast-modified: Tue, 16 Sep 2025 13:42:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71076,"size_decoded":71889,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71076, version 1.0","md5":"7bcc67f8ae55e0710a4e94ad8ed7fa9e","sha1":"6d9ece0a2fdfccbb1d87dedf091636ea29a445ab","sha256":"8ae56aab7628191d874faef495d5229138187e8ed6061ede100fe362104faa91","sha512":"ca709e74fc69a2a58f8df0aa7f06286c6a6b647237667414078e9902e3cf8191c372d0dd18e7f3f7d501fdc68d4ef3b7e9b6b3f120332b6d28fe1e86ff6ff25d","ssdeep":"1536:0e4Dupx93MP079TtfLqjIMUNRAVMNVE1rwZ7dKWnllnfrRNR1Z:R4cx93+079T+C9NVa+1jRNRT","tlshash":"6363027cbd756e41bc01be61b137722cd79b81c3f41e1124eb266b6e53b119a2f90b12","first_seen":"2025-01-22T04:10:45.448113Z","last_seen":"2026-08-26T11:28:39.888308Z","times_seen":319,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":52,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.319Z","timestamp":1787743688319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\nage: 994912\r\nx-served-by: cache-fra-eddf8230034-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":14164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-08-26T14:35:08.387288Z","times_seen":10540,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.bet/img/chittagong-mobile-casino-saree-00074.jpg","fqdn":"rainbett.bet","domain":"rainbett.bet","tld":"bet"},"ip":{"addr":"104.21.44.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.bet/","date":"2026-08-26T11:28:08.341Z","timestamp":1787743688341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 15:14:16 GMT","end":"Thu, 19 Nov 2026 16:13:03 GMT"},"fingerprint":{"sha1":"23:BF:DF:92:5A:76:23:7F:F0:A6:93:BD:F3:F1:74:47:26:5C:B3:86","sha256":"3F:29:11:B4:4E:DE:F3:B9:DB:86:44:EA:1E:FE:67:FA:25:43:FA:BE:4B:2A:E6:B6:6C:ED:EA:A4:D7:67:EC:53"}}},"request":{"raw":"GET /img/chittagong-mobile-casino-saree-00074.jpg HTTP/1.1\r\nHost: rainbett.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:28:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Jun 2026 12:06:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a22bbe0-16497\"\r\ncontent-encoding: gzip\r\nage: 921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpHaebosIFvha8iwRzbFVQNHhLi2HuSi0plgTYpe6ZMHR9%2Bbd1gD0qWh2uhlFYSGDWFkxEjQUXiPZzGoesj3TDBBSaxGSUG1lxaMtAr%2FS6WqckAOpI8R2SoUNP%2B5L0g%3D\"}]}\r\ncf-ray: a3127dc42e84712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91287,"size_decoded":91788,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1152x576, components 3","md5":"7e756ffb3f163409cfd1b77f4dd7243b","sha1":"14b9bb091a6da62af0f632eae370db9fc5ffa505","sha256":"74ed42189651eb1f188c857581136f246f7c8dea1fad10de4ffcc91b8b453666","sha512":"516fa54adf95dc2588454b0bd6051897784fef7f13b7a5ce80be1f90a293657d41d51ef6078bcd5a12ef88b4d3c2d6968ed18e8d1064fbc5c1e8ce0ecfc4f7df","ssdeep":"1536:7Iyg/W6vvTVDneNjxRgcQR4j4cyO5dzuDZ8fzrmbMDQKg/Y3m2P0IsF8WeoU0nPR:7Iy40NLZEAyO5dzuDZ8/aROoJI0nPnR","tlshash":"61931214875e7d9ab6a9c9943dfe37b9cfc5c6810ec1810ec9d8b397390540099f374a","first_seen":"2026-08-26T11:13:24.294879Z","last_seen":"2026-08-26T11:28:39.889958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbett.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}