{"report_id":"a70adf12-e1f0-4590-bcc0-a46774a3deab","version":0,"status":"done","tags":[],"date":"2026-10-14T19:49:41Z","url":{"schema":"http","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"172.67.180.253","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"title":"rainbet - Casino India, extra credit on deposit for slots and live tables","dom":{"size":85625,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4661)","md5":"e41aa0776095d94509a2c5229ec37ab7","sha1":"98bc2d4cd7c937b707e41bc0b2cbad276a8c0461","sha256":"4bacacffd983308b7d7400186cc68d6f83d080316e57cb09fbe831404dbb6f6f","sha512":"a17faba3a9b5587c1f2dd151874248107a49186eaef094afbd1b15291d4bf7c831e9aeabd517974776b1d1f315c75aa2dda1fcb3581495eb82afd49a8a2df610","ssdeep":"1536:O4zHactzLOzLdq1lJ2FkFZvfvYwwpXZvK8Ceh13mTYtALf/7F60YiyyrCFOih:zj3Uzo1lsFIZvINZBnBYYmfjYViPA","tlshash":"98835171b0f1227b10a381e67a653b6baea9c613c7160d59b3fe47d40fd2cd39863258","dom_hash":"domhash1cdb9215d6904fa443ffd21bd79f8e30","first_seen":"2026-10-14T19:49:56.441469Z","last_seen":"2026-10-14T19:49:56.441469Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"172.67.180.253","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T19:49:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-11T23:25:40.076337Z","alert_count":0,"request_count":4,"received_data":545262,"sent_data":2166,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbet.sbs","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":12,"received_data":747844,"sent_data":6088,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"js.oneonstack.com","ip":{"addr":"175.41.22.204","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-08-24","domain_rank":0,"first_seen":"2026-08-26T23:39:11.849335Z","last_seen":"2026-10-09T07:31:38.095635Z","alert_count":0,"request_count":1,"received_data":144,"sent_data":451,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":2,"received_data":98690,"sent_data":1140,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5a7f60d548f2dca4747aec101537031","sha1":"aa325c88efdbad4b7317587e56c4cffd6ac29ed2","sha256":"4478036ed655ea81a7c4b5b0aeb35e2482aaab47a9d0b6d6bbef9ef36e89f13f","sha512":"a21acf25a2d72890a4418842ee957105f0efaccaf78532270d8094d4645a4cd49f42aacc294a0cc425d5d88fbfeb10746fcf3454b20955e043884baf34620949","ssdeep":"","tlshash":"bcc02b553b311d38014810f7313fdb4c38b330245c298110015fcc2c2980ec288e2c20","size":144,"data":"","first_seen":"2026-08-26T23:39:16.496709Z","last_seen":"2026-10-14T19:49:56.501772Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"008e7eee07c26f62e6b8a072bb8db52b","sha1":"2abd49c5a39f9155ed6882fe5212b4bcc3575eab","sha256":"5709e714f60e9a5827ef8a158a9c176f8ed1b676b4f9116380f0171755f1e0d1","sha512":"97e5a9d1b1d4e8f8dbe28531ae1dc1103eb51d6ea3a7bf41327f31c79c4a155f7026ff89a05d2c1d3040d5a5db8de0bb02008d19640b7afe411b4a8aa5226349","ssdeep":"192:d/O/oZg5BKM8MuEdYQlzDOalCOGivOOPvlkMKMS6MZDMl2FoMIxjwuSedkoWOwDC:3Zg5BKM8MuEdYQxR6ifPvlkMKMS6MZAD","tlshash":"7a02e827fac6152a60a280a68797777dac7fc02293014d3dbb1e73780fc15db06a1a66","size":8329,"data":"","first_seen":"2026-10-14T19:49:56.502866Z","last_seen":"2026-10-14T19:49:56.502866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T21:31:43.146086Z","times_seen":454910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-14T20:30:11.383591Z","times_seen":33233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.713Z","timestamp":1792007265713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"17fcf-nuSWzJuqrli5jn/B60bjV42vgUM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\nage: 2569038\r\nx-served-by: cache-fra-etou8220048-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98255,"size_decoded":14395,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1d14ac4000dc4a8d3557b256248d9000","sha1":"9ee496cc9baaae58b98e7fc1eb46e3578daf8143","sha256":"4ffa6bea4304d2eda418683f56261685ed47bf00995039f27e5ad62d53938d2d","sha512":"cb098f6eec464b8709ec6c70097f9b089c1e79ec6dd38ed9614d873f9d9658a6e9267178fd9cdfaf6068d7d2780963d766695e56eb10f5dfff441e5bab444fef","ssdeep":"768:Tqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMR:KOocm4FJwZ5ijINRDlIia","tlshash":"d5a3eeba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2024-01-08T15:48:29Z","last_seen":"2026-10-14T19:49:56.445163Z","times_seen":5033,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.715Z","timestamp":1792007265715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:43 GMT","end":"Fri, 11 Dec 2026 20:01:42 GMT"},"fingerprint":{"sha1":"A6:C0:81:49:02:5D:55:F8:AA:9D:F1:C6:9E:4A:41:81:F1:AB:0A:88","sha256":"80:F5:46:E0:B9:70:82:92:76:41:07:3D:0C:47:81:6B:0C:25:BA:5D:3C:80:F9:ED:61:2F:24:50:D3:99:78:A5"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Oct 2026 19:47:45 GMT\r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"859ed7a809c823fc4c3b21178846441d","sha1":"d8f7f19047db4b58ff5147ae8b0ad70804263d9a","sha256":"d0db1bd8545c950185812adf96ec94bc7313a58750a86bf6f38168669e628919","sha512":"73643b482c472422817a112b606f73a53f73cc44c713377f1d0091aa08be3ed25fe003a500daa3f2953b340e79b8060b5416c11027a21dcd4d98688bb3562f14","ssdeep":"192:9NNIxO34OxvENOPCO3/NxoNNryfO3iExBONEhYO3RrxSx:vXyMopi+8","tlshash":"3b227792002ba400ab971dc263cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2026-10-05T17:52:09.328959Z","last_seen":"2026-10-14T21:54:56.931493Z","times_seen":1164,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":26,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/assets/theme.css","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.717Z","timestamp":1792007265717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /assets/theme.css HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2026 04:50:01 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a30d5f9-77a4\"\r\nexpires: Thu, 15 Oct 2026 07:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBwEdfbZXi3rolGCldXdYbqVVEuexe6ozippB%2FlVTD3Be3FfFfDFXX6uod6ql9orl4Hj4SyZhupHF6IqBZg1YnsD57JpwLXSXsb2cHAdag%2BpkurlLIjA%2Fjh9%2BCQ9Wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91902bfab32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30628,"size_decoded":6870,"mime_type":"text/css","magic":"ASCII text, with very long lines (30628), with no line terminators","md5":"33d20babb2efb452943a44481466f040","sha1":"092b106913a650dd5ec533e6efe97b135cd4dc8f","sha256":"e6c99f8f15a6da23575623b62157827d404389a4c674a3cc35b6d8a5f12e6051","sha512":"80660fee6d099bb9414e000ddaaa48d8b55f718b45d2a7af6ea7510cb62feb51554dbe7c9e37a7eb27cf2a14e5ddf194fe20f581b643f883db3b82d933487f6e","ssdeep":"384:VqTngos17Y1T8rwV18NIo1zoxN5lxK2XNAWekKf36LG2:V9pyx8rw/8NIo1zolZ0n3o","tlshash":"4dd2c725b350722df817a66e3ac5bb4c3534a044cb230e9cf67b99645eda1fbdd23608","first_seen":"2026-10-14T19:49:56.448162Z","last_seen":"2026-10-14T19:49:56.448162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.725Z","timestamp":1792007265725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\nage: 1362091\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25259,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-14T20:30:11.383591Z","times_seen":33233,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.oneonstack.com/jump.js","fqdn":"js.oneonstack.com","domain":"oneonstack.com","tld":"com"},"ip":{"addr":"175.41.22.204","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.727Z","timestamp":1792007265727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.oneonstack.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 04:03:17 GMT","end":"Sat, 28 Nov 2026 04:03:16 GMT"},"fingerprint":{"sha1":"1A:AA:8F:46:92:58:AF:33:98:D0:88:5F:46:57:7F:1E:8B:C7:9B:46","sha256":"32:6B:B3:F7:DD:A3:0A:02:3D:3C:1A:C3:2A:B6:15:ED:3A:30:04:40:11:39:58:F4:40:78:4D:62:A9:C8:A3:07"}}},"request":{"raw":"GET /jump.js HTTP/1.1\r\nHost: js.oneonstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":144,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T21:38:38.165528Z","times_seen":19106563,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":29,"connect":231,"send":0,"wait":231,"receive":0,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/assets/logo.png","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.733Z","timestamp":1792007265733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2026 04:50:00 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a30d5f8-10eef\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frLcHNpe48jA5VkW%2F0t%2FujvsTg1Z6uQlia8C03W5zf7Dvq7%2BhItBQKFcrXkuJ%2BBYoqQdvLYcJvMiZiGAL%2Fej7vw1aB3xEslKaWbL%2BSpH8pPxIN%2Ffj%2B8Su9%2BCiFbq3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91902d84232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69359,"size_decoded":70052,"mime_type":"image/png","magic":"PNG image data, 807 x 165, 8-bit/color RGBA, non-interlaced","md5":"527827107cb3c4b33f1747b881679e14","sha1":"eb3bbb0e703493092217dcdcb9fb9bcffe2e809f","sha256":"20dc862a2f0acfe61cba502228f02aa81b4faac45b81d69b2d24acfec4d3b597","sha512":"799a2c935d6992425d2b3914a57933bac91e428db0638574d0c7be75d176295201d7286fb2918fbf44dbc8829e638b42951323e0564fc7f7465b83ba108cb2db","ssdeep":"1536:GLoonUPxqfjcy3I6KxlEPzCiWJ8r80huY961eDT02l:AkPxqfjXZKxlKCXJ8o0uY9/T0O","tlshash":"3a63025e1f4ebd37e199d50e30fb392bd1822f982fa41404a3dd0a595314adaed0edd8","first_seen":"2026-10-14T19:49:56.456335Z","last_seen":"2026-10-14T19:49:56.456335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":361,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T19:47:44.604Z","timestamp":1792007264604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Sep 2026 09:36:40 GMT\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqhJGFT398vmH6viFX%2BAIOB6yPyVLrbndF6GbJ36LYi19px1AqnVLWIryysa4ez%2Bm%2Fi1U%2B7xMKW%2Fo7MTJIRQBFFf0SctKp70PBibSqjVZYcMTOO7lXmsid4osXU%2BRg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4a918fc6e3832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80497,"size_decoded":16639,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2283)","md5":"1fc4fb44db4763d3254475a3cc0697d0","sha1":"ed3ae93f18e342f072ad0aab96cb6287f718e3f6","sha256":"e7fe76dfb93c0ae7fa1651a75cb618c116bdde6cafbef7c0e123c255f82c9517","sha512":"7500cc21634147318307969228a801db609f4341f8cad8b248c08ece2ba4413e2236a49cffe64364efc67d50f2ee9eb389c5dd5657f5ab481cbfbe0b15c1ce1f","ssdeep":"1536:6gIactzLOzLdq1lR2FkFZvfvYwwpXZvK8Ceh13mTYtALf/sF60YiyyLCFOiA:1I3Uzo1lEFIZvINZBnBYYmf0YViPX","tlshash":"db737174a0f1227b10e3c1e67a652b6baee9c613c6170959b3fe47d40fd3c839863258","first_seen":"2026-10-14T19:49:56.45862Z","last_seen":"2026-10-14T19:49:56.45862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":89,"connect":16,"send":0,"wait":368,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-01.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.719Z","timestamp":1792007265719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-01.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 19:50:32 GMT\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\netag: W/\"6a305788-e3bc\"\r\nexpires: Fri, 13 Nov 2026 19:47:45 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LX9o%2BdZnldPZAgRPBmaylrRs7Hyz9Y%2BgA0EnPK5eVdoK4DUUTPm1nO3P0a9gftXFKjAbxn0%2FKDRVfR8dg8yV0K73RP%2BOxoB9DaU8i4M1mnnH0%2FaUSFjAcXQvCaU3hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91902bfbc32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58300,"size_decoded":57787,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"dfb4caa3d42a303616064da23c1da097","sha1":"69eee210ea167d705ffaf6817bf700e6ad159ced","sha256":"799eb2401af76bdc1e65fdcd9bfcd7c594160b1b254a20779d163950dae8ea61","sha512":"753f2e3f21504c86cd73e0ec3b355ab441d459d20207d35a8cbfe039ef2491d8abcc61396b1f474c1f7e08b73894f368fc4867b46e240322eef88261b978d212","ssdeep":"768:QqMPEgL5j+nY+CbtDcL/8CXrxkbP1PZKQHr0xjrRnMes19LZeLbHhpMxiB968eVF:ssgLAC1cb8YO1PZfY9t/ALZeLtpVM7x","tlshash":"2243f1c76381de80237e8134dc9a1392d166fb7749f417da6aa02cd03a468dde9e3da1","first_seen":"2026-10-14T19:49:56.463167Z","last_seen":"2026-10-14T19:49:56.463167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.194Z","timestamp":1792007266194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:42 GMT","end":"Fri, 11 Dec 2026 20:01:41 GMT"},"fingerprint":{"sha1":"4C:54:E7:A0:1B:BC:44:26:80:75:11:ED:9B:4C:7A:93:68:20:C3:A1","sha256":"74:99:57:A7:60:3B:4D:61:7A:B2:89:39:83:92:F9:FC:5E:27:EE:54:78:A4:CB:83:8A:A3:BF:2D:EF:96:C6:AC"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 21:21:56 GMT\r\nexpires: Tue, 12 Oct 2027 21:21:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167150\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-14T21:34:50.609401Z","times_seen":316681,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.195Z","timestamp":1792007266195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 130396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"1fd5c-Agw8b5KAoxXoQl1/kuFbzQzdobI\"\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\nage: 2366726\r\nx-served-by: cache-fra-eddf8230043-FRA, cache-bma-essb1270063-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130396,"size_decoded":131124,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-10-14T20:30:11.389244Z","times_seen":18246,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":14,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-02.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.199Z","timestamp":1792007266199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-02.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 18:09:46 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a303fea-1b9fb\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvaAIiECoNaJs4P9QmSmgIG22KYQm8bnKtA8y%2BHGWGDL%2BnM5R85l3tA6fStlrVT9fQB%2BhRuUCpyAx6InNCLvaKef7WR9xINmzqwuk7DdvrUEfNKJd5ngR2v9uFVX6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905b9d732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113147,"size_decoded":113484,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"b0bac5ca375b944cb85684a73a1c31bc","sha1":"d178e6f1796e30ecf02a4eec9aceac965a20b5fc","sha256":"353378f307fbb16364abe6c888f8c71849ec6eea52b2b805e4ba297f05250fdd","sha512":"0f5723f77aa9ba2d7446e6501da1e68e1d6ab588a7dd6dee414340403700816d5886b087eb62dcbcb1aa2bd7936598589c22daaafcf41317b62aca63a2c462a6","ssdeep":"3072:SzArxF8v8YGvwy4gVyBkf0KYun4F+7INQI3s3/uJ7UzSCUB:AqxFu8Pfedun4FZQGJ0UB","tlshash":"66b31212614b89e313596fb9b273e68222427ddd6816296fe53c3bf1242b4df1ee60c4","first_seen":"2026-10-14T19:49:56.468099Z","last_seen":"2026-10-14T19:49:56.468099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-03.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.200Z","timestamp":1792007266200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-03.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 18:12:48 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3040a0-15f98\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXx53uYoqN6mZnLhbvh7spwRuPBzwZD7WqrKGDyohtVtMpUv22x2xtoQoPSyVCpj5elW0dvmRHk1azm5n9qvp1pqwZDB6ccg%2BWN8EurXw7MVnaQqaUR4gPp31cLa%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905b9e732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90008,"size_decoded":89408,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"b7331a70ebaebd062fb0cadd5271f8c8","sha1":"74fbe9cb40678391725c9a0a1772f748b74474c9","sha256":"ee1fed58c81241b4b93f0a435868903d1da29e95834db5c84f4381a8620bfa16","sha512":"82539b6e31481a4552988f45c5c9c5574d896ffbff5101b0233c9265816844bf8f12ee3ce7825a4da033b8f8fdac7aad9d87b35223e63e4dd6d67badbf59c94b","ssdeep":"1536:6aQE+BSIFetwnNC3y6J1XbEj4fAuQN+dnIZdS2V4AznNO0l3alxhy9D8W7:djKSoeeIy635Oh4qnNO0Ralxcb7","tlshash":"5393128a716201d5e89d238f9ae473f85360f5c65a85de6b2d5f38c97ecad9360c02f0","first_seen":"2026-10-14T19:49:56.470572Z","last_seen":"2026-10-14T19:49:56.470572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-04.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.202Z","timestamp":1792007266202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-04.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 19:53:12 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a305828-8aee\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GOghNEDMAV9pap%2FBDAUEBSkVeommHLm9wrdnerlY3EKx95HvCya%2B6xEEoCXuR3NeqWdpJiDzQqWqL%2BAhz7d%2Bc2KuZ6dg9%2FzTI%2Fw5cmnwKlKoKYMNqManH8H%2FEVXrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905b9ee32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35566,"size_decoded":35695,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"c84fbe5595d016451e3da7b75f56daca","sha1":"76a9c7dffb538157e52c7fcf20fdba418ebbb45f","sha256":"02a57a5d744632a5e37bc26ec51a665e821a2daa3db8d14247d54cb54f6c2c37","sha512":"e00bc307d97234a8b0c65ffec4255a4366c28f3c6d36d31c22f0a581137c0db16a351d48bd9ba731e95f6eeb708c6e1578b0e7a30e7fc22b3cd1aa19085700e5","ssdeep":"768:Km058IzmuBH2ba/qscQZq5fNFnZqFv0dhtwx8JXR+//1OQvlyhZJfs2+snCS:5058IzLZ2bco51FnIFv0ftS8P+/0Qdyt","tlshash":"85f2e111ba568812ed62bb31855f35457a2a1f72ebcecb5fe41285cd84fb0c0aec87c5","first_seen":"2026-10-14T19:49:56.473973Z","last_seen":"2026-10-14T19:49:56.473973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.721Z","timestamp":1792007265721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 16 Oct 2026 19:47:45 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxBEZYlWVJaswc0sJ%2FnsL%2B9Dsr9FzUHK88nM2GkOKt57bktAVi94hJRpqNRHzJoZrjaIQjoyTvXv1gAgpTcqOIG3NboSRWmOZwFM1JsUIc4ttPeTpOxeKBFTg1zBVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a4a91902bfc832fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-14T21:31:43.146086Z","times_seen":454910,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-05.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.203Z","timestamp":1792007266203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-05.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 19:45:48 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a30566c-e1f5\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AupGcHX58aSrOTcYrSsUM9QxwP8rwEOzZk3I7QUGcq3re6%2BuMzjw%2FRk%2Bxgjw9juyooOD1p93miiAGto%2BUs%2BACpel6ieNwxmEGngjH%2FtpP2%2F1M7rSsDQ7qNWpwpGtLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905b9f632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57845,"size_decoded":58334,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"67e20cb91d42c1177d6ca280381d6e49","sha1":"2306dc8b2d68a2b3be5d5e55b9d2406dafd2c488","sha256":"81fe63451b9b0502906a23494ac487ac92ebb409769696a11ae02133a5b2fc12","sha512":"103aad41b896826caf0f9a8113543da35012335d675e81fd1f30c64db51dc9c822cf7e112b355c1912ea86d5b22161b49aba32488945e636c527f7bdb212bcc8","ssdeep":"1536:H+7AhzoWcjj7BgDpQo/jfgFg8UdtKP7FKnz:e0hELLHoXntwgz","tlshash":"eb4302db2152f796b810c526af14c6bf07343a0408f3e85e9b1c7fb4a8de4d991e51e1","first_seen":"2026-10-14T19:49:56.476599Z","last_seen":"2026-10-14T19:49:56.476599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-06.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.204Z","timestamp":1792007266204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-06.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 18:07:36 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a303f68-16c49\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cQRUo6w9GkXjpjJd7jlr1ZQrJg2OwFuGjnWlAcfbWXHu2k32DxEdyxFo3UaPkAoovuhCcyX2FLNGMpqNmDNP9FHVgJB19i9BEFUI5sjYgDoDimDkSFAv8wC2%2F0jRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905ca0932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93257,"size_decoded":93116,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"dec1e5303685ea20cd8fa7bad13d4b70","sha1":"8ea4be89050bb442006860f276eb83fa5c176f98","sha256":"a121de21aa8891e63f4622e244a51a7d4c07b18bd911f6da7c8079a64f444070","sha512":"37b09be59ff075e90bd33684b4cca6fbf174cd4b9db233975dbaffe48f852ec4c7a4c110c57ccf486b4219fe6e3593274119739005a35a65f339e64edb3b0f2b","ssdeep":"1536:mJg9hnzw1cv+uMmkJgSJddyiGcuTIEPjy/ArSXbghxicqoWxSFR:mJg9hnzwU+IBu/tuMEP+/ArSLQ4cqoff","tlshash":"6793124255e4c9c0a3781be290d19ee76ba1dc5d72817ad53b933df0db92ce34aac072","first_seen":"2026-10-14T19:49:56.479045Z","last_seen":"2026-10-14T19:49:56.479045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/img/rainbet-home-casino-brand-07.jpg","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.205Z","timestamp":1792007266205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /img/rainbet-home-casino-brand-07.jpg HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:46 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Jun 2026 18:17:06 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3041a2-18d0e\"\r\nexpires: Fri, 13 Nov 2026 19:47:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hU0jbn0WmpZYYCx1Y0bHuI6v4%2FvX87Ioj0VP5OBnKYUlrPPny5WGvTiwB1aqPHBfzPCQ73aj7m%2BxxTT3%2Fr4MarYoxb1ax%2F4wNsObw%2BO4EaWxdzAB0Uf1TxfVQishzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4a91905ca0b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101646,"size_decoded":102097,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1280x704, components 3","md5":"f785d8b49a21fc57a7c14c169ab404b8","sha1":"b8db09227c4019b5a1e47a2d833e26a6ae7fcf57","sha256":"d92d5c15faa6f07de0442754c9d19616a250c32fda51c016a6f90faa4e3ec22d","sha512":"01f0fca751b7f1f3bf870010aad18aadfcab7309da157399e73a251836b8e91496f686fb25d4bd404a0090e0fb18137f1e1c5647ef85156d96de274b65bcb340","ssdeep":"3072:dRL8yXHNYvj741Hv5cTH/W9nI9jPcbNyo3XdId:PYyXHNYw1PM8IBPcwiX6","tlshash":"99a3026f0b815ca8ce08277be47a27885f69cec44535132fcd42e995a1826fae1cd7c5","first_seen":"2026-10-14T19:49:56.492786Z","last_seen":"2026-10-14T19:49:56.492786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:46.192Z","timestamp":1792007266192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:42 GMT","end":"Fri, 11 Dec 2026 20:01:41 GMT"},"fingerprint":{"sha1":"4C:54:E7:A0:1B:BC:44:26:80:75:11:ED:9B:4C:7A:93:68:20:C3:A1","sha256":"74:99:57:A7:60:3B:4D:61:7A:B2:89:39:83:92:F9:FC:5E:27:EE:54:78:A4:CB:83:8A:A3:BF:2D:EF:96:C6:AC"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 21:21:56 GMT\r\nexpires: Tue, 12 Oct 2027 21:21:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167150\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-14T21:34:50.609401Z","times_seen":316681,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.sbs/assets/favicon.ico","fqdn":"rainbet.sbs","domain":"rainbet.sbs","tld":"sbs"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:47.094Z","timestamp":1792007267094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 19:41:07 GMT","end":"Sun, 10 Jan 2027 20:41:02 GMT"},"fingerprint":{"sha1":"5D:CC:1D:C1:A5:83:F1:C2:41:1A:C9:91:B3:B4:E6:FC:C8:14:AE:96","sha256":"53:71:EC:21:99:8A:6C:A9:8D:FD:4B:47:A9:9E:E8:15:E3:FC:7D:3F:97:99:46:CE:E9:29:D1:8C:CF:3F:8B:73"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: rainbet.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 14 Oct 2026 19:47:47 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2026 04:50:00 GMT\r\npriority: u=6,i=?0\r\netag: W/\"6a30d5f8-1e51\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bkbh%2BbKs4pxQ2gXhYxTobn%2Fd%2BwMT295e9UKgC21KJh03ETRBZCbs5w6dgIB%2F%2B6HdL8RuGoo5aZhkgUmFbJhHgQNngcwN1KjoFnrsz763mgeFtevzjR8eUj0WTBlWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a4a9190b5e8a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7761,"size_decoded":8450,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"dcd6e32f8354fe846112dba8a3b04e17","sha1":"37a55da959c90d9e9bb45032ee67edd361d42d08","sha256":"faed82b1825faced05a07ae912676637c274dd9f7e4801caa5bc8684ec4174a0","sha512":"7114b5f8e0df1c5fa6e19f99b1ebfaf01e724d6b65513df1325e8f2c7119a9306a439c01feb87d2eaac5152c930905eef4cc9ca013bc5fbb5f835c22f98d6791","ssdeep":"192:PxZkkLOkdbdzK2TjivPURpz/NTvNLBsAk1JNC7:fxLOub1WvPkz/ZFBRKJNC7","tlshash":"94f1b0ebd9b08c2ccb08eb7539050569765d360c2dd1c130f66a1e6e1cd92144c6d27f","first_seen":"2026-10-14T19:49:56.495365Z","last_seen":"2026-10-14T19:49:56.495365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"rainbet.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.sbs/","date":"2026-10-14T19:47:45.709Z","timestamp":1792007265709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 14 Oct 2026 19:47:45 GMT\r\nage: 2298197\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270037-BMA\r\nx-cache: MISS, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33988,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-14T20:30:11.373529Z","times_seen":28667,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":9,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}