{"report_id":"b7bb1f05-2172-4a62-9615-cf8d9e66be71","version":0,"status":"done","tags":[],"date":"2026-07-17T09:16:33Z","url":{"schema":"http","addr":"rainbet-no.com","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"104.21.12.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-no.com/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"title":"Rainbet Online Norge Casino: Spillvalg, Bonuser \u0026amp; Mobilalternativer","dom":{"size":146515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7149)","md5":"913256606955810b0900560d813b754d","sha1":"6690480b77edd1cf0600f3e8ec4e4afe3e820f7f","sha256":"7d63bd6dad09a746daf842319c4db6e8f6273fada22e6d0f4d632ae1d89ee151","sha512":"637877d8d27e08232bc68270210bb0affd2d36d40c539f7e05d03cc4397ceb9413b624fc36ed29ea9b076d40e7db27ef90de616d08cd7e297e155f25b3f7cd0e","ssdeep":"1536:ZfewPuaMqSGVDC2lKsW1eT8Jm0u6frzn98gt5QYzkz2POz4vujdhW0ewPuXZM:ZiRlOUOC4yM","tlshash":"a7e3e7d862f065ab448783c27f615a6f3e95d217c8550904f2fc4be90fc7c69ec2b68a","dom_hash":"domhash137ef3cdab8fcdcf603035150af00d54","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-no.com","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"104.21.12.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:16:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-no.com","ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-08","domain_rank":0,"first_seen":"2026-07-16T11:27:31.11702Z","last_seen":"2026-07-16T11:27:31.11702Z","alert_count":292,"request_count":146,"received_data":5126255,"sent_data":84554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-no.com/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1a01b9db8c6556cc9657e41587682a","sha1":"9a2fc1c669e58b7dcb9201e36aa6dbf40fbd06d9","sha256":"a9a0afc78422b80570a6a73337328452c405cdc49a585887fc016fc6af7eec56","sha512":"c6a4271bac696ed2dad1b9fe261f4a0bbfa82ad103aa0a03649d5b62223b9a15b41cb41db5998831b2e69a992566b84f7ed6c725ecc8d18b473cf1ac02db0c84","ssdeep":"","tlshash":"9480000e08028b8222ca228828e230800883880833220aa202afe008020a08880c2800","size":27,"data":"","first_seen":"2026-07-16T11:27:37.722748Z","last_seen":"2026-07-17T09:16:39.778585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T11:43:13.928122Z","times_seen":399537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/runtime.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-18T03:24:45.617029Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/app.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"446602e5ddbfae94b239b0bb785ea6ba","sha1":"3c0eff68810340f48a016f2c98b7b2eed00bc1f0","sha256":"b5508c68cd195f6f7145f50bba149082d1922fa489e2be15be5f7e32caddddad","sha512":"669bbcde799f5d2eebd919f6fc2e58f37e85a0b84249c1d84c8c6c40d07d018fa83dfe41e102177dfc23422dc81c6c6eb3549d37969d1384e987b6877e2c454f","ssdeep":"768:jCGaiEG2C0kHxb/U+bbF6aNpTFP4xcDS6zCigxDLJN6XcNFX:VaikE/fPrFPOF6MNJ","tlshash":"ce13948db384b1320597a222816f520bf2757455309ac4acb576c8e1bef8c9da173f7e","size":42007,"data":"","first_seen":"2026-07-16T11:27:37.563818Z","last_seen":"2026-07-17T09:16:39.746996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-no.com/build/frontend/app.js","line_number":2,"column_number":38303},{"level":"log","text":"no-NO","filename":"https://rainbet-no.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"no-NO","filename":"https://rainbet-no.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"no-NO","filename":"https://rainbet-no.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/5.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.270Z","timestamp":1784279764270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh9164\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB7BxhmkCF4D0VteHyyGNfp2tsQSrlPkfMUWH5X4eGIKg8wUBi%2FKWAiOm%2BMJ6bFikK6OgqkkvRUiEp4uOYFVWmwH4IWiaI6%2F9pQVO37KoxiuRLxsevOs0W%2B8hwCId2lqDw%3D%3D\"}]}\r\ncf-ray: a1c8254ebd2c5695-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-17T09:16:40.349953Z","times_seen":56,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.191Z","timestamp":1784279764191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7uV9VsGq76FM8PVViT9%2BBDTZHANeqm%2BLxNuzXzXF57HOTSMkdjAiqe0513tfgxw8QAszZfMQi1a0ayHCA2ExBBXSN9yAp6Ch6ymklBocViSC4vLHlXIRm3ir0QLsAAG7g%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicpyw68k7319v\"\r\ncf-ray: a1c8254e3ced5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1179,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-17T09:16:40.299944Z","times_seen":46,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/dmca.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.280Z","timestamp":1784279764280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k7316tf\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YnNubBixzgc9%2BBcghd0UA7mpdgyzejHmv6L0AlLqjYdDzRjul%2Fmrq%2FoEss7BjUmKzh8ZnE5qKi%2BZMIkgweTmJEcHUOyIwInXKO6PQSeN9LKY07My74lEM39X9Ua5rNUUA%3D%3D\"}]}\r\ncf-ray: a1c8254ecd345695-OSL\r\ncontent-length: 3536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8835,"size_decoded":4551,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffa9d1b1819dcc2df652ec9b241ebb2a","sha1":"272131abd3212b37eb33fce828a3ebe7426947f5","sha256":"54eb4809e7cd397b27b8a2226b1af7a7e81f8ee69b23ce585a4f6508499dc197","sha512":"03d74364bba70f698b4758a65f8a599507534fa7c0f69370985834d595031397606b113360eacaba6630b11ab139b174d661b62c277c8fcf6eeba5b11d2814de","ssdeep":"192:V/ZuwLSqc87Lq+dFSlV+49RJJCuSS94WT+AY0yuvcs:VcySp87LqnJ74WTtyu9","tlshash":"8402b38963b2a3ecf805b7fc4a19683539971cf97181c99cc3e11c12e4d216d6c69ce7","first_seen":"2025-10-09T01:23:42.837206Z","last_seen":"2026-07-17T09:16:39.540055Z","times_seen":9,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:13.637Z","timestamp":1784279773637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:13 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bG%2BiPitkKRyyf1%2FTIohyjBGfJ%2FVpnm9XkiCmg6jMkTUvwcXuw78ITKP4rm8qTi9rajBBPz%2BqZDqiqEu9JZCP0eQsmq2d5AtCX%2BfzqCQwnqezUtYn97fZJjvTDH4h2cGRYg%3D%3D\"}]}\r\ncf-ray: a1c825893f885695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":92,"size_decoded":1042,"mime_type":"application/json","magic":"JSON text data","md5":"ce365b7e41d349eb68febed3d8a4d2b2","sha1":"55d54c85c36414e1803b8343ace36cf369ea106b","sha256":"2dc29456dbb6245b8a595bb826f4059a6f18465cc5d67b647d85372281ac85c5","sha512":"05f0d65d0077608eaebc35915b31cf0b9d6951ad72e61cc08bbe3b7d841fdb654c72ad0c30befca36fde8d8656cca611aa09647fd506128507a62d36bf9beead","ssdeep":"","tlshash":"e6b012cd804008c69273f100ca8731b0e1183943a2d00c003b8489424d652924003d54","first_seen":"2026-07-17T09:16:39.543745Z","last_seen":"2026-07-17T09:16:39.543745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/languell.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.997Z","timestamp":1784279778997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/languell.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/languell.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpyrordidz6z3\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIfQ%2BE%2FLGd9%2Bn9VAxRFFgE1jNBAeVdFOdd25Xfd5DL2pw94IqCg53zqGX%2F2tXggwDtv74Hgpu3ORdet86WUWS5Ypfz6LT7rIj9KiEETynj1Aue2cJ0pd0SxmU3hFiKP43g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c825aab9235695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9039,"size_decoded":10049,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"8e504a934c13a7dba983b8f9cde8fc99","sha1":"20de8fa19dc9d91888437fd4c4cd967daccab871","sha256":"11681a95a50c5b35f550d8ac7a8dca86e14d7d62b8bd4b6edd399a23819d9ce3","sha512":"37bcd87f4b6f9162150ba4202c57c6d37f2b338bb6c9abc56d0cbf1c48b35cab03b866ea2403e1c68931db710b2e58fa3b5ca10be687b6fee01728dfbd215082","ssdeep":"192:RHB681ThoDj29XTJ/RFEMC81fdx49oiRbZln:RHVhKjwxlzejln","tlshash":"bd129fa57b80d324d91e037ec6085a6dfb046d116f731f1a1ca619c82ffe59d1d085af","first_seen":"2026-01-03T05:05:42.467318Z","last_seen":"2026-07-17T09:16:39.54601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/cletus.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.196Z","timestamp":1784279764196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/cletus.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/cletus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrkuv94b4oh\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p41xtvz74oRKRJHDJUiKV3rcgTX4UfuiGWbBK05yWgkflsZoK8ZitE2L7oO5UwPBXTA3TcVjY8Wb6sVi42vtZPPUruSoIwpWJSXbCyi6IcSI2dDLcjfu2pAqTnSaTdKzdg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e3cf15695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6065,"size_decoded":7065,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"82f5ea99c31664e2f8784fb5b77a13a3","sha1":"f2563f6f337df0219def3987c0067bcd37cc195b","sha256":"c0409bcd55f2afbfb08604c3081acf46e0bad068521f158e05e43061bd8e0f97","sha512":"d69c7c97e9d134146b4e117c6461ff8119bae9d643cad103c4198c0be09b9d76ca565e5060466addeec91843380f296e6b104618393b47461d880d2aa200e60b","ssdeep":"96:L64iLDp9c9gS9NkUnDZgVQ8m1jWfwMCMADBnKvSFQ1FXZrv5GVycz3VLBuv9nX6V:LASgVQdQsvNnKvSFQ1FXZjogkYJ3s","tlshash":"d3c16deb0167d206d41d0ab7607aef5047f89d00687c4718e441174dfb9eca7faa03a5","first_seen":"2026-01-03T05:58:07.363959Z","last_seen":"2026-07-17T09:16:39.548582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-1.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.242Z","timestamp":1784279764242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh917d\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2F4v7qfehqb643uxVBVzvAbnGCnIaVHlUJ1ORS%2Faay%2BreEW0cXEb4l0JT6jZ3wzZCzMj1TOLinn%2BRkjTb5sKbdecSah6xAdZHps0IYRiZLV343edIvyYTpbF8GCWFRk1mA%3D%3D\"}]}\r\ncf-ray: a1c8254e8d155695-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-17T09:16:40.368129Z","times_seen":71,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/arcader.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.917Z","timestamp":1784279771917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/arcader.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/arcader.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpyru1w5xt1v3c\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0dogyYaACgZYBhNT96IEci14zRuzCQO%2Fk10ZMeKpdvSXKS9oYmQsI%2F60mdDiTyA4fbEgeZTwWlhxTcdYReojITwTiOXvb9h3xgV%2FugkoiE8JNrUlQw6xnJtj%2FYmmJbL0A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e7ef15695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86952,"size_decoded":87965,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 800x600, components 3","md5":"6ed514ab83e3903f24775acd1ee615c1","sha1":"0edbdae24734d9d1ebcca6b09967cf946a137e12","sha256":"03346ae6ff533befcc690b279266310dbcdae74473e9fb2832f4c6509c8ee12d","sha512":"8a64a0f3b0a409337330dd9501dd83770f6aa398eb1dbacb9e045f9d320f914fa39b476efc92df0888d1048f4b14742d2b012f45818f7b7f0704f2b8779d339c","ssdeep":"1536:n7NeQ3SkK2K4+zG1ZTHLSGN+HqHIgH3lI+agVJjfGB79WqVM3alDR6IttlEIUMHY:7NX3RKuZbLSMogA2GVM3CkkEIUQY","tlshash":"988302ccf299b827c55741f62629c928b10268150e9056fd7aabebbde302f7019463f6","first_seen":"2026-07-17T09:16:39.550679Z","last_seen":"2026-07-17T09:16:39.550679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/class-prez.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.199Z","timestamp":1784279764199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/class-prez.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/class-prez.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrkuv94b5ze\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBM7NBCT%2FpudnUIJeKPtB9KjSE5vdAvD3brDrhtLnu22rTxlB%2BjpVzZWDS9EgbfzGoP4F51nwrT5HBjVroT%2BtqLSkQnD7EEkUbWf9ju4v4X7yIeJZUXjdgCSmbaTC6y6Cw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e3cf35695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7754,"size_decoded":8764,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"cea52722587cd38a92635a04a7a18fb3","sha1":"9ff99b555ce4a3105206363e29a94427da2ccb94","sha256":"8b5b3a69d07361497a612b80417dd6f8ad9061d04040cea0e2a84048e4a509fa","sha512":"d34ded82f51f16fb9a2a4f4389750a149201362d9412207f418790fb3cefb496ae7b50942d78e2fe3d32648831bc68071f961cdd722fe18337df42438718fc07","ssdeep":"96:qj4Pcg6p/l6VcHHrWOXJdaAjTCst9APvQOAlW/qWbkADudD3tsNzEDZBtfhfoz4y:qj/LWAJdLjmT4OL//vDyD3yZQZB1mzZ","tlshash":"9ef19fce92755993f98fd87e0945af706939afc55062071f20d95820233e9abcab7220","first_seen":"2026-03-03T13:50:30.622975Z","last_seen":"2026-07-18T03:24:45.558276Z","times_seen":3,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/eagles-wings.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.234Z","timestamp":1784279764234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/eagles-wings.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/eagles-wings.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys1ldqwem9s\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1VEA7Ni%2FgTJZtvXlBF649u%2B7mbf29xoc0g1Q39EhP5j1MTfpd4IQEh73g13bM%2FrnHjjoFpBUUkNYKuwq0ds20btzzu3sH4Jp0bwkSI49VOFhKbJb0tFTyWUZVb%2BYa9iLg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d0d5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28864,"size_decoded":29883,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"5479be6255d73e41cc4461b229a2c117","sha1":"c67bbb04d44c42b5944de4e634edb6a6d91df209","sha256":"249c4ff0a22fb9b86be1c3b39ead94fd8c1d9d2da81960911cf3d5f20c765351","sha512":"a0fdfededd03d569d033f454131a46f156c786490f48a3a33d99a5c8084fa147c94afdf9a867e073470af800ec3549a2e3c8f2919d5fdecfcd59881620fdb016","ssdeep":"768:5WRScfMJU34P/veZBDlZ3RgvHtod1xrDPLHPorxtUx0:4skMJU1Z5M01tDPLKI+","tlshash":"f5d2e140a2048971fc4d75fb34935c39736efe589721af9aa6f430188b647fb694932c","first_seen":"2026-07-17T09:16:39.555737Z","last_seen":"2026-07-17T09:16:39.555737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/undying-passion.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.240Z","timestamp":1784279764240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/undying-passion.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/undying-passion.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys6f89oukb6\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bjh9VQeLxC85Icf3aMLwBjBHB%2FPod1OAerh8Men8jhrSRA0xXEiNgM2%2F%2FlARmJABWzC6shZO4Oys7hbXC3VtqxgsQhszlDl8WEVXZTtr0awanKuY9z%2F%2FjkpRf7llH%2F3%2FAA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d135695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26322,"size_decoded":27343,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1aa75bc9a043dc2d9e9bd8306a93750c","sha1":"bd66fae0fa0c37b95b79e31b51d67e566ede5512","sha256":"a774834de4803a39fd3e5da78b82032a49e16a0bf8a841ec8ef9824ffda9ce91","sha512":"576476e0265e121ed113f992f340cec69351bf8d297103aa95ba602d7c36f318f8efc85b325849079f41df85f3a3bae46b1a6b656dbedaae6e9fc4491c7322be","ssdeep":"768:dQ/8rQWv+jz3dMnz8rZtahwuTsFcdeJ4r+7:dQ/EvYLSz83oXocdSx7","tlshash":"b1c2f102dbea8863f03e9e69c66c52e0c7b8cc78251dc7f56783266ca707d3899d4d91","first_seen":"2026-07-17T09:16:39.558083Z","last_seen":"2026-07-17T09:16:39.558083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/casino-stud-poker-playn-go.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.982Z","timestamp":1784279778982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/casino-stud-poker-playn-go.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/casino-stud-poker-playn-go.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys0lnqzgiwp\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCgik2Qz%2FpLthe0A2b5TO2P%2BLwREpUOd0JGO2QB%2BCw6GVzbsC7uk%2Fa0aD2bpBwA3CxH5%2BYS%2BWe9mW9w1wlhvJ3sLWkPN6DYfd8L2z1vTE%2FsbcqG3Yu%2FT%2FGX5mj3qlm1wvA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91a5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24505,"size_decoded":25541,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"32ab00cffa5ef363a148a1a14cf521a1","sha1":"dfef8be2c0ae1b5c4beb67e26ed38e99da2ec79f","sha256":"95377ae0163c2cd5c2a3c34defd9258723b7ac98a48ca0e9bc5295d74b7b8b83","sha512":"2b781f0c66c290b77aede871bffbd756dfaa4627f2a51eb8adfd0b5b70a6d3aaa196709fba317dc10b48c77873f0b1669e7549abe6c0f5b8c299e208ce0d35d0","ssdeep":"384:w03r2P8j8QCbjupe69J4XYaCNw8LyTU5i/BUCqkqpYq5aDe6T7kID0eNYc8jPbV7:wsQ8IPju794YaC64yByky5aDe6ZDga3q","tlshash":"37b2d07cf594182ae42d726b296dfe74516426e2e0c08a971c92234913d43ccabea5ee","first_seen":"2025-10-09T01:23:42.747388Z","last_seen":"2026-07-17T09:16:39.560679Z","times_seen":4,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/cupids-strike.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.225Z","timestamp":1784279764225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/cupids-strike.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/cupids-strike.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys173cj7h9e\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tm4Mbi1I6XtQbYNtNSspHyiVFrz%2FUOQ2N3xLsNEgDMBipKT99mgIWcGqxwvc06eNXEq7qF7H%2F2tDxj5%2BXyHDMESK14qMT2L7DN5jGN94uLs6KzOAjzmUl6Nm2ozzByoxIw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d055695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22370,"size_decoded":23381,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"750591288da58d6a66bd989ef1977f61","sha1":"b102ace85fd2d441addd657b870db74e178a64c2","sha256":"0f5f7d6344400cba3ba63af707a5d8612042b63ccfa1b047604bbf963576dbb1","sha512":"893ef60cae9f163efb4a46031dd8ef7354805bf2f340b362588bfbefadd0921360e4f2655ecd6cc384eec9ad78deaa9cf98271ee38eff2af9b6fdc15bb366b44","ssdeep":"384:vXBLfCH6UA5OlK+/dxT3dTF5niRg9RdSTuuTInnptQkzySRrgbjd+V16:vXlCHRPL1xjdvsg92aZn/Q3arqjdS16","tlshash":"f4a2d053470a0480bf2e0c2016f8be7eaf0972513a641adb13d9a7661b6b0fbddd849c","first_seen":"2025-12-01T07:25:15.241932Z","last_seen":"2026-07-17T09:16:39.563177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-11.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.255Z","timestamp":1784279764255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh9i4\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoAYVzjsXX3c%2BQxAZvHgRCN0brPDNbMDdpifI29WCmofHBaBu%2FRmzTTOhQiSHcFFSUq3I1DPFhlTrzaB6Kj4Ql33MiatqGIRjXp9kXoKbZ%2FTDdWMmFW%2FOminFF9BTQkIog%3D%3D\"}]}\r\ncf-ray: a1c8254e9d205695-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652,"size_decoded":1371,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f532ad917dc66ad4fee3be87815ff5b","sha1":"e0393259d3ad4917eb315830a532f98562e937dd","sha256":"5a09835c6b7c89deb7ce6b70476ae635ba37693a691a95599a7a143ea57c03ab","sha512":"4f7e407b1da775a53114d69a1eac158bba30449ad05821cf2951dbcfcafb928d69547188b518e63bd0c1179e2155014362acd795d146335b8a02f82076881052","ssdeep":"","tlshash":"d4f099da77f8e40a8a054381911bb2412373f1b80aacc998f244b2f4b80cd8a6a915cc","first_seen":"2025-10-09T01:23:42.845485Z","last_seen":"2026-07-17T09:16:39.564901Z","times_seen":11,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/be_gamble_aware_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.278Z","timestamp":1784279764278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/be_gamble_aware_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/be_gamble_aware_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k73120ob\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqSfxsWKmo0cVItSDgKqDn2WQom6yEbfC9a59%2BO78U1v5H7VJPM2WUzqrhBcV7fjtgtWOeuspG%2BRIZ1uzhccLN0M%2F%2FPUQ28pUDGrFoIVwQLAI99YkbQntqJBEUXCOt9BgQ%3D%3D\"}]}\r\ncf-ray: a1c8254ebd325695-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94187,"size_decoded":44551,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cabf5a6798388bba301c4f11737e900b","sha1":"6520aa0b76e64af3352be583a6c132a9ff343f97","sha256":"f2dacdfb25093fb7aef311ca21f74029249de91e3a01281981a054982810e61f","sha512":"9087f527d73c4c2edcda872dfb7ff5e82997e757b6b218fc1428e23685779c44d6bfeed0bdda47680cc4ea13c37e275c9b35dfe79373f68033fd157703747d2a","ssdeep":"1536:vPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:3N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"e393102a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-09-23T10:56:20.472788Z","last_seen":"2026-07-17T09:16:39.567453Z","times_seen":47,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/baner-2-69fcf3848730a6.66994376.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.189Z","timestamp":1784279764189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/baner-2-69fcf3848730a6.66994376.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/baner-2-69fcf3848730a6.66994376.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj4hv6t\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcSnsxzDX4Yw%2BXHcZIj%2BoEq7mG%2FyNcTP6sV3OWJo1E2D9s3PexKVtjbh4q6AxWpj8oN4HiyftI9Yb5Wkzc1rsr9%2FsPyXBIc8U0zrvXYgcKTF39njSESg0zZl2JkDifSU2w%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e2ceb5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":833573,"size_decoded":833734,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"418cfad7830404c0abf7fc307f452451","sha1":"dd346905cb28203386aa6b72624d205b0afb1bf3","sha256":"af7a7cf3217c1bee3ae1d4f33e77eaf40d1b36b64b669a71b5829d9d3b032a8e","sha512":"59fae55499c8060d36209e8893c0fbffdfc49958c92563b4d526634a2d1fa664907cfdaa97c78c19974906bae85152322009a810a25228aa105bc885a9be05c0","ssdeep":"24576:+f21LqJOubh6Jnh3q+7Db+IiBscD9l9xbC:EMuQD6+7DyxBZ5xbC","tlshash":"990523bbf9d612a8a788bb2460f1e843d221fb0f3dd1f46247064a75ed9f7050d1a635","first_seen":"2026-07-16T11:27:37.61657Z","last_seen":"2026-07-17T09:16:39.56998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/penguin.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.957Z","timestamp":1784279785957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/penguin.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/penguin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrpy8phk2nb\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hUDtFSXeXe%2B8YI7DbShk%2BI3TYOW5uMPpxuxhjMADxd3d%2FTvewt6NSKJx4RmNXNwtBRONe%2Fs3hUGgrLfGnTCihCoELQZbZEftf2o%2FL2OP0wz1QrX4FtZabU6zhUwFvYbjw%3D%3D\"}]}\r\ncf-ray: a1c825d63ae15695-OSL\r\ncontent-length: 3320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3431,"size_decoded":4350,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5ec477ed722f605e8da89cbc9f831d08","sha1":"be1565f30630332c2cd155e4f2d41f4189b08c40","sha256":"2019338984f9c2b6e81250b0f4fa8498f74c4396843495bc1ee0c0c8f51a2cc5","sha512":"2cdda29f9cef67422cc1f88aa53b3e0d5b3b603da0e3b32a86503651bb8710d9e76b080b10c86d35dfe3d99f77d56cff4250c7fbaa060a9463c4f3b011503e47","ssdeep":"","tlshash":"f9616d6f4b710a11d23ef0b8046d4a70ad40ea793d204bcab459446cbbb98129ee80e5","first_seen":"2025-11-17T14:16:40.5715Z","last_seen":"2026-07-17T09:16:39.572008Z","times_seen":5,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/red-dragon.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:29.969Z","timestamp":1784279789969,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/media/games/red-dragon.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T11:43:13.894338Z","times_seen":17337012,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/victorian-villain.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.237Z","timestamp":1784279764237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/victorian-villain.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/victorian-villain.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys6hm032kd5\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klfYiB4HM4nj3WjRIZI%2FXztbr4bgAKVqYDqj9OXGrtMSsDLOkLotbYUnwyuRhOJJcE2n70CvASA79iLjj0JNSReMo0bCVodLbu83fHZmQIEN16H4lpcoMcYG47nJQaOQgg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d105695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26393,"size_decoded":27404,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1123c10243f4ba8d6ddade7bb5b44650","sha1":"aa5ea8bab2bebb984183ff7bbc7d3efe939967c1","sha256":"c3f5b08123324e09595fcc689560afb4611b97cc98152115e2dc57ac67f6deb3","sha512":"2ecf347494af512be7a79caf44ee062dec9457a068c1b4964f42699a064c740660d9bf753dec72796e7c2a32357353e2bc111e1c8f9277df684baf506c9c23c5","ssdeep":"768:X28KfwFtHBl0CdFwPTBy/r6vOSj5n0XopTAxR:G8YwFthSewLc6GSN0XodAxR","tlshash":"5dc2e06ec5c0643ff6881e739b9460aed241ada4c6b377db0493d809861d3894f762ae","first_seen":"2025-11-17T13:48:13.46032Z","last_seen":"2026-07-17T09:16:39.573537Z","times_seen":3,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-3.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.245Z","timestamp":1784279764245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh911l\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aNWw2rniBbzqcRSW2k04TU8%2BceaWycJ0rhsxM%2FX3v0E10MbIjrieWRCvYlzclFisbbjneJYPlgDOIXuV35LATb349iax0owHfyxSQXaQQJ%2ByMqu%2BqEhWIA2B9lsGTwfvA%3D%3D\"}]}\r\ncf-ray: a1c8254e8d175695-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":1719,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-17T09:16:40.294936Z","times_seen":64,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/gustav-minebuster.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.935Z","timestamp":1784279771935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/gustav-minebuster.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/gustav-minebuster.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys2iq0f6sts\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wD%2FB%2FnTqPedChchSnbFks6GBS%2B%2FuXlKWF4y7Oq6HkyNLL19BtDl%2F9Qkn%2BRDfyRocdlagA2Knmhlg%2Frp%2F%2B9%2FFalJYLIObYUJ2ZyoEecbyZWXmfzm8hdJQjXvVYf964SskGg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e9efa5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37360,"size_decoded":38396,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c9496e52af91d71e8c739c672109bf7a","sha1":"57873218b87d66fd16d16f4351b7fc2a432beb1b","sha256":"11be15e6eb0372016e8e062c53d325b43600cc0eea6587284c3030c283d78a69","sha512":"903888efe5e3582df5f0dd0e5c78d913474e27ca5f59cfde3749e07715114a27aa64001611a0b9e2f7bd20581e254a6d56e24b0928b112de97f0f8c286a94fd2","ssdeep":"768:Ra91U6l4iQck/mMZ3HXoQkwgDYCX2iTTY7io94tAf8I8nJGyMMFtbsNKb:cJ4fu0QYCGETqbCAf85GpNKb","tlshash":"79f2f2bb6fc5a65f6bfed515b5d133f00963ea240e02c32660036fbf32953c44626659","first_seen":"2026-07-15T08:05:07.104077Z","last_seen":"2026-07-17T09:16:39.574919Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/deuces-wild.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:17.949Z","timestamp":1784279777949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/deuces-wild.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/deuces-wild.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:18 GMT\r\netag: \"dicpys1e8jptjnm\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIhrj1%2FiJab56k19o7r5kW%2FewjsdcxFoMWQxbwyKbGH%2FMaWUHzQUvlI7PNec3p46%2B9Q18Y3mbxz1yPcR%2FKn5Dnr0e3Nfz6s5G4XippqndRSexULBIl%2BJR30EN18mTsXenA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825a438e35695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25474,"size_decoded":26489,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cf303e47a6768b883f940dc59f7fd2e6","sha1":"5a2b597d2259bc6b0da68e78d78c56ccb111ffc7","sha256":"b8d5c6ac93be6ca0462aaf7de83fd63a0794a055fe2305bf7f62705e8b191fcf","sha512":"55a1b9b60ada23cde09a260138073d4949935ee19e397b64a9bee8a417d91796feb0438f9f84d912d41abb851645f11bad0cb24195a4623e200560412c6c19c0","ssdeep":"768:Peh/T8+BzZiE6hZOAaIh+fuj27PSvMHqiDUKW3:mhfAZTh+mq7P5/DUd3","tlshash":"9bb2e0b1aba42a85f29c0424065669b49ef92cdf9b9c1403c12e5f1d7ba97f0bc17a0d","first_seen":"2026-07-17T09:16:39.575576Z","last_seen":"2026-07-17T09:16:39.575576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/cheerful-farmer.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:23.969Z","timestamp":1784279783969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/cheerful-farmer.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/cheerful-farmer.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:24 GMT\r\netag: \"dicpys0o1hdmpod\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5A%2BT01dQ4mJLEV3k%2BigjFqaYX827XK2%2F3pljoyR6eR1jaMWoX7YrSBB8vNRwkELvxinHwVrsXvKC0S0DsbSIZzlIDpJnQp0KgtUJL42KQByCVQ8IxN0WNAKxqDJ3%2BNXjg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825c9ca6c5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33277,"size_decoded":34292,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"83a269bea28ace146c87bd8a840789fd","sha1":"579a8bdbd3295e0059f35a47259e4265c1b10f00","sha256":"29c4a2ed22cef51887ee6b79b1b4756cb5e4a9f98218ea725efb9e2beccc04ab","sha512":"bfd0433330031a6bd85303ab2df85156162e806a06b5575a78ed55731dbf39e5aad485e0ee147a191d963c508cb58a8c2442768c272b14b5a6854333d9a72442","ssdeep":"768:It+SNrUOQK2EX/Qowz+2gCf8RllEmAH0A4qODTOulmKe2FsBc:5SRDQVU4wy8Fha8O7MFz","tlshash":"f6e2f1fad710c9b4cedd7670147e68c3e1062950e644c323c55f69187fa82de3fa0aa6","first_seen":"2026-01-02T03:19:50.93638Z","last_seen":"2026-07-17T09:16:39.577988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/million-coins-respin.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.231Z","timestamp":1784279764231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/million-coins-respin.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/million-coins-respin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys43vlvxeib\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9NTTSMISjXqKiKxhs7MKTx3Mi2Nv%2F4ukXJkb%2FU%2FG04sG14UA8tbTLepY75h1S1nOi5EKY4fJ439av7Dpd1lLetHejPziOpnpHVgraCL4EWoPhmeLzTEwwEoWDXYzC9zxQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d0a5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18803,"size_decoded":19821,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d622755306d80dc982c23d4ab0e0c571","sha1":"e2c6b5b94f5e47094040be121917903f9dfc5d14","sha256":"8ef7fea0d9ca8fea96d181e5c8991276a3a71ca4f1806f87d826ded4b077cf81","sha512":"e62419cb73ab92bf4c0de809c0c8f6ae250c67f10e5ac6f6214d813d7a8597e0d066ff3cbc0f5526c585bada887723a0a1eef989cd4516e845ddabfb168d4450","ssdeep":"384:LsvVbQJIyGgNgwimsLHjgzy5DkzVyjcoAbZLCG+c+spt1DspKqb:LE+JIyGsgwwjvQVDHhEsZDzu","tlshash":"5082e1de9b79582cda2c50f9c592c0236945af2179094cfdaddc36663f308c47972ba1","first_seen":"2026-07-17T09:16:39.581552Z","last_seen":"2026-07-17T09:16:39.581552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:19.637Z","timestamp":1784279779637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIvDp5XqEObKe%2BDvKZ0FfK4fh6E8sXCs0xb3VBPrzzDLS6YJ8Jlhtw0R3oRkWJAUSHjLKaKw9990kUu1uDvd%2F9EMQdNWDiSQHbzx47H79vYNL6dKZwLy1I%2FtkIZBPW5a%2FA%3D%3D\"}]}\r\ncf-ray: a1c825aeb94b5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"84b92f32206d766a10b7a02da8afa363","sha1":"0870fa04be434dbc014d10c6ddae857784d6c14e","sha256":"9bfcc6bcec82fe0e59ffd19c9a47e1a6cd36771cdb9fc78531b8580fefaebe90","sha512":"734416d8b4fa6521f88f74e84549ff62dcf2646aa8178e825c3a80d652090ebbca4be1feaba4126ebb94f701b77553aba8f9b716c1d1b56f9d8b08422941a0f7","ssdeep":"","tlshash":"bea0118ac880af8a83b3200cac8e33a020b80b0300e208082280eca08aa820a0023e20","first_seen":"2026-06-13T21:57:34.718223Z","last_seen":"2026-07-17T09:16:39.582983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/los-muertos.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.926Z","timestamp":1784279771926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/los-muertos.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/los-muertos.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys3n7h4jt3r\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwBHy3208Vnx%2Fh9zC8shBBApytLpV4ZR6vlFaFxxbubV3X6y4sUP9E3rcEcdZfHlXZZcuyLBjkXZC8Z6DGFSB7DjFEOdXX%2BzGPsaUSDt0KMXdrGDLFH6szs4RHOFmngMBg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef65695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37719,"size_decoded":38726,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"5f4668e6cdf7fca1feef3351b887908d","sha1":"7ff56780e090a2a7eda6509f4b71b600381dd98a","sha256":"27ffa7e5557c398877c4d3e9611c20e5640a3373e5aa112ba0c8a5afd4bb25bb","sha512":"d37502d91b3fafd92ae3dd911b97fee7bca326640472699016287431fe2eeb61c9e1b9f84ef956a6bccaf4bdd0e9d31f6d00d6d1f66f5ce85b82980b94451625","ssdeep":"768:SPnrFeLO+BmPy7aLXmmwTzChuoykYo1LbaBGb1crRVeLmhCOhkuKNr:8rgLy9HhSDKLMGbYIP5","tlshash":"6c03f1b009f54873b18043268c7336644357bd70b524be6498f46a9c3fee4e9696e3ad","first_seen":"2026-07-17T09:16:39.584337Z","last_seen":"2026-07-17T09:16:39.584337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/runtime.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.178Z","timestamp":1784279764178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicq1uxec62b1jl\"\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZRFIZlzpp4FIyWoVjGbTldMhjZvocHnGljD6AwPXcB3%2Fwk3igWc2Nd2VzpAGwPUXOIHVJxB%2FUHcQD%2FcakURaHII9dat%2BV4pF326aNjgbVkcf4FtXWoVYcnyqPnuvkM4pg%3D%3D\"}]}\r\ncf-ray: a1c8254e1ce65695-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2064,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-18T03:24:45.617029Z","times_seen":108,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.190Z","timestamp":1784279764190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp3ny%2FfifAmdMDkxsDJNJTAzXYTZpSelZO%2FdpcuFceOrr6tEzxEFFDTMYwTGTFzMvgB0K3s09fJ9iZ5k6l3lFdnFEr4bKtdd5IHceA1KTN2vkd0d6NPeZRZl4phoa4xW8w%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicpyw68k7319y\"\r\ncf-ray: a1c8254e2cec5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1185,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-17T09:16:40.28456Z","times_seen":46,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/speed-cash.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.218Z","timestamp":1784279764218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/speed-cash.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/speed-cash.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys5fi9rwj1k\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6eEYVfZYjV%2BH0DnNvWdoUi0chSb04dz1cLJfOr%2FL9y6wEjT%2FywPuQaPLG8LZv4rwCxR7HlWZA3tGeSeiX980wqOTqxCgrGopHiagEmftV4vd0oPNMiKARPrFC9LRHQMpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8254e5d005695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24680,"size_decoded":25688,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"94d96ff37072162176230d635b0d149e","sha1":"1b2427ad1b37618563908c65e38f03087248a137","sha256":"0fc8c878ec4635b8a3d01f5b33828993e4fca65b1229b3eb6d7b385f42624237","sha512":"6e18069e639c1c75275f07924ea1ff0b5e60bccd9901fa6ef57a9a4c6910e8c3d040e89ccb4aebaff383915f4198ffa75958b99b532ae285f0fd4e95aed44b82","ssdeep":"384:8yN8cKxQ+ZUKySRIAIudCpQAPLefpFAL7pxZbOO4dUdF0sCWTkSq:8AKxvU1SSAapQADeeLDP7kWoSq","tlshash":"8eb2d0f9bf7ad078ee6f1a747519d04b97011a87c23c9eafe9023bc19f60054a8586f4","first_seen":"2025-10-09T01:23:42.766029Z","last_seen":"2026-07-17T09:16:39.587181Z","times_seen":4,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/adults_only_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.279Z","timestamp":1784279764279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/adults_only_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/adults_only_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k7312v9\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5HlfyHpn8F6B9EbwBJCXja05uRR7QVotvsnPDCG6Kwr96%2Fquun2EOqPRsvRCFDW3AWEm7DQ71QV7%2FTVGaXbB21R%2FPaBEzHVaLo9dEMROO%2BYwwMa8biVTapPfe3t9FdD%2FQ%3D%3D\"}]}\r\ncf-ray: a1c8254ebd335695-OSL\r\ncontent-length: 1242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3717,"size_decoded":2271,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80ca1af432991649dc6def429941f3ad","sha1":"741b6360bee484481993c7fb4c0bc5b069619156","sha256":"a3cf8724656616bd4b5f70c1f62ff2348cb7f8ba63bde6b557fcc8a795c661ac","sha512":"c97b87f29795c3d44488b338da97d9d35bbdec86cc615bddd4764c4622aacd41be23263a5894fb6c3a8c025f8dd269d85d637eacf7a359b784cb67216a2abd36","ssdeep":"","tlshash":"fa7123e1dbd875e871025bf4c43e9e6576b220bcb61ac71d86e85fb21b5109ec8c8c90","first_seen":"2025-10-09T01:23:42.840632Z","last_seen":"2026-07-17T09:16:39.595727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/great-book-of-magic.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.910Z","timestamp":1784279771910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/great-book-of-magic.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/great-book-of-magic.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys2gca0zlh2\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeShBi7phtiCMoXmjLS0Z0JR6VLk1IPetBmF1P6%2BOQw0ko%2Fb3PHcY7bfJyGq53VoBpbp4S91Tn4XLNOrYVA4T08m4z%2BjGewZSCN2u3NWNUKvDM921Q7Ig90L%2BKTLD%2BLSYg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e7eef5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27830,"size_decoded":28851,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a38899bd8a0328efd54a30893344d20b","sha1":"bcca2e565cf923845278682e1de6e9991ee06d9f","sha256":"947988ff00078be2d624abdaf033225e0e230509595a0b6b18c06afd1e16e72c","sha512":"0ff2821416d5bb2a1f1dec054ff0744da69ace86978e3869f756356729ca9d82ba6fca5ff6a41860b672062c33b19aa7495c4803fd922b8ce32a2a7b71f567dc","ssdeep":"768:JasAVbSW4j8H4CiEK+XhFAaFooEJzay2n183xd:Ja5uCiEVXBF9nsxd","tlshash":"93c2d04ee9155ac6bd0c1ab8ec88a237e336462a90133bd32c91b5c7db9179ddc713b1","first_seen":"2025-12-06T17:29:39.343598Z","last_seen":"2026-07-17T09:16:39.596649Z","times_seen":4,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/close_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.274Z","timestamp":1784279764274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k7311ih\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WIfCbAnUplW3bHmHTCsTOZxbUj7bDVStJMVMGl%2FgQchqPWx0BjH4mo9BpEhJ80nyw9DDm%2BCnNVNNEx1v%2FWiRW7uBsA1rx4X0T48zrYqfrUv3tHpzSOreEz75RNAmPXygg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ebd2f5695-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-17T09:16:40.370157Z","times_seen":72,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/fonts/Gilroy-Regular.31d54a4b.woff","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.615Z","timestamp":1784279764615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/fonts/Gilroy-Regular.31d54a4b.woff HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/fonts/Gilroy-Regular.31d54a4b.woff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bf3NGCC8IdEBfTqFJC0obso51rjZG5nahxloBbxTndnPvxW4Hgoxle1S0YWEd08j0v3u9rmURJ3oEcYcMLkvPKFTN27y5VOpNKjzSYHhJ4Gp2RA1249me6Sx17T53ItvsA%3D%3D\"}]}\r\ncontent-type: font/woff\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\netag: W/\"dicq1uxec62br8s\"\r\ncf-ray: a1c82550dd645695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35308,"size_decoded":36287,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35308, version 0.0","md5":"8e8705d069fbb9099b3a1e1d779fa5c5","sha1":"ff762363b88add1df9a3c36ff1247796376b61e6","sha256":"9f2ef335c07566f0d4f273a4b72bcb3ad2b02f0c6232da6129952ee60bd07ba8","sha512":"081979dc680378f1490aae2e95d440f28191166f28f2f8c8595b63407a19ec64731e6414a917f9c13ca30384c585980055e4a53d3c2af8fe1f890cfd872d3a39","ssdeep":"768:4N85VmJRQz2r27LQbHzggXlyaReKlVeJy5hkJs/xB51ISr:c85UUQrzgaU+eKiJskJkr","tlshash":"bcf2f1e5baae3c67827eeb84719d4e3d7d0457eed2c527800641787f8a8df4961c220d","first_seen":"2023-04-07T01:55:32Z","last_seen":"2026-07-18T04:59:53.490144Z","times_seen":1255,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/streak-of-luck.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.921Z","timestamp":1784279771921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/streak-of-luck.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/streak-of-luck.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys5hw063j6a\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWlfyZITqUG9qGt4avNzf90MRUCbt4Oo%2FSON4Kw2r5AgC6JQ4bfqLF2B6TsRZx2Su8CrTwNemqvfwWmg0YMo7NdHUyv7nrAwpI%2FMvdElRPTgo6IB6s4%2FEwoRUPjoML00WQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef35695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24850,"size_decoded":25862,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"92077c527d9c961e737997ddc0417d5a","sha1":"e6782678ff6504b7f29ee0f8f244eb1008f2b485","sha256":"8f2d3d34237d54b727f6fbf2fec27db665e7fee9dd0d5d7ca9b5e1cc3f63d72b","sha512":"6bd9470618bd78ecfd3787c71140e4939bb75b022ed0991ee1409dad6cb30ee1f94d3f3c2ffcfc759db5c57282e9ecc839109908a09aa21dfd68cd96f81400a3","ssdeep":"768:73S0uaSCuv1bqQxs/w5TMOSTPwWdCpgZvJXFRDeKz1xn7:TS0HuNbqQvjSclpgZRXFll7","tlshash":"1bb2e1059f0f660be32d0355ccb90222bef562bd5a733582a05106ee53a65f6ad3c1ef","first_seen":"2025-10-14T14:51:48.916336Z","last_seen":"2026-07-17T09:16:39.600311Z","times_seen":5,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.693Z","timestamp":1784279785693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:25 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BDnSOT6O2LH4oaXIfn%2F0lmKGh1qAGMOtrEKcO1kDtmKBJ%2FcLQHjmttKSKlu4wcgjLIO54ySxHNn%2F7Xz0YHZvEnqenkoU9OTTI%2BmtxxVtGFG3RSc0OQUBcqG0rsqLLQZkw%3D%3D\"}]}\r\ncf-ray: a1c825d49ac45695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":94,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"3968f67a45ae000399f06bd66638c8aa","sha1":"2ed8e1a783fe3eb43514bc7371d34aa7269cc20e","sha256":"56c84f09a051a7b8b660b85ec4132b8c7270defe3928bdd944294a12dc048fad","sha512":"cfb597897c5a818558b40304767abd4fa007204e7b4de6ad1fe0499c0914c64e1f98d3098bdad7ca22a4e31cda86cc904f865458cb09108a499bee4c7b03cce9","ssdeep":"","tlshash":"78b0128fc8405c0746f37914cc8e308462b40e4b50b50402bb81db414f5400d0443c60","first_seen":"2026-04-03T21:46:18.14164Z","last_seen":"2026-07-17T09:16:39.602388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/all-lucky-clovers.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:26.943Z","timestamp":1784279786943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/all-lucky-clovers.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/all-lucky-clovers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:27 GMT\r\netag: \"dicpyrs77mwavoo\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCVZdxaa7WtRHJMWNX6%2Br6psqhiVUIzH9frbg0AmCr70ifR6e4UsBPpJy%2BpYm839BG9VQNVKjHeVug2r8T664rPxOrKtiiI5LiSSMOmkoWWnaNNC2lA6QsbcIPamtZ%2B%2BYg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825dc6b275695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41064,"size_decoded":42081,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"82f5ff953f660008c0776a4ff82bf77e","sha1":"c4c6b4d8170e68d190338f013e0b9375ca9176fb","sha256":"c23a7067b59cd81157eb6fdb15a0be98f52c94e1d209f3e62c638f3f91e4a6e6","sha512":"937290bf37722f09fb244a1066d5e8244a6f52ba2c6a2fed076a4df35e4eebc600fe8fe53fb9d7987cb2e7a83c4ff579dab44adf46e6bacd196370b09ab98016","ssdeep":"768:45GJp2BsLJbux2RZDRQ6FmwjGeJlTeXL9J2Txlqu/YewmSuJN:KGJpYGJyxIZFQIrj/o2Vlqum8JN","tlshash":"830301b28f75f4a85bae9e2e9080d363fd352f7ed70ab4b203aa53564359700c99c1d0","first_seen":"2025-10-09T01:23:42.771606Z","last_seen":"2026-07-17T09:16:39.614626Z","times_seen":7,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/banner-square-69fcf3845c26a9.61301225.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.600Z","timestamp":1784279764600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/banner-square-69fcf3845c26a9.61301225.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/banner-square-69fcf3845c26a9.61301225.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj43jcq\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4l%2FnKJk3nvO5MYSP52dv7Ud6a3ni2tTZUuv0i%2FYzKQ5lkH9A%2BOUG1Xe5SGXiK1ZmSlCixJVJgldVqfr5yfxR1R6REe5LTDgXRWuw9EljCpMaOJxHWeDqxquT2ZcH9lJ6vg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550cd5d5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165050,"size_decoded":166105,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"26cde3b4b68a4433284e43d8dec58454","sha1":"ad7cccb55363f7833df43a2fba5622c189a11e11","sha256":"69ad0630d787d5eea292d74ce1671de4b815a978c8e5e116490e23fa61b8aae8","sha512":"a4ffb6804db067a64f4d5d1fc0ec163529b556238d7717179f982438e0bfd8080977ffed3a355279d0bd310626e94823bf03a608f0d74f96acf208c971862745","ssdeep":"3072:LkQ845pUbv93tssy4iXu0PyCm9xCpAHxp0rSLwfxKwbUp4:Z8DdId+0KjC2HxpVLixcp4","tlshash":"9ef31286c7f2480ba89c5573ab891f010a0e6d7471a7cd0e669fd811f3d0f6be89516b","first_seen":"2026-07-16T11:27:37.648673Z","last_seen":"2026-07-17T09:16:39.61573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-10.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.254Z","timestamp":1784279764254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh929m\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MzPcJ78RDsHhYhLsdXdo2onDywx1wNO4mXpTRz0rUJxSGbeC%2F0wk2LUczFreXDn36d8%2BQib7Ja6GxIx7BJ3FfobjVpylxQc6%2B23t3lw8dS%2Fq%2FddVuSDpL2%2FD%2BqIS87y4mQ%3D%3D\"}]}\r\ncf-ray: a1c8254e9d1f5695-OSL\r\ncontent-length: 1340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2938,"size_decoded":2376,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d0983a90818be4c4f394ac871a0a8ef","sha1":"1a41a9ca9ff3e4ac35aacd690172019c41dc2c60","sha256":"8f13096098273826693cafddea7276124e94ecc877d79bf4faa27b165ee5fd4c","sha512":"8a6c1ebce6059629d365920bb4385d8e145fe9417a8caedd70b823a02773583ff8688b2ddd34487c86f1ca8ccd1eacbb40d5e883f3a4018219fc0d99de1fad84","ssdeep":"","tlshash":"c05186f361d871d1d207efa0e81695f8760f38bf2f5683854484dee4e25a2dac89ec50","first_seen":"2025-10-09T01:23:42.799105Z","last_seen":"2026-07-17T09:16:39.618752Z","times_seen":11,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/logo-69fcf384acdab0.52033746.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.186Z","timestamp":1784279764186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/logo-69fcf384acdab0.52033746.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 691\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; hit; ttl=1109; key=GET-http-rainbet-no.com-/uploads/media/2026/05/logo-69fcf384acdab0.52033746.svg; detail=REDIS\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj4as4\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lcLcYhIDJRrkMKaCrYSxSS1w5chzEblFlGNtHWJtImOdEiO8%2F8fhj%2Ft5rT56HMrKhJ%2BRV%2BTRYHiguxuNYUaCf%2BfDLBptJctZ3fYrs0DlRtTX%2FZb6Zt9xxTiOcLVpZ2DvA%3D%3D\"}]}\r\ncf-ray: a1c8254e2ce95695-OSL\r\ncontent-length: 6246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13972,"size_decoded":7324,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb1bc63324dbee459e9435f5f5d5da20","sha1":"2e95c93f20fc71b36ac21b44397dfb8cc242c2ce","sha256":"bb52c245c92c9965e2f8f56400d80ef546a81dfae4e5f51d2c1276dba4c4890c","sha512":"4bb90ccf1287c26dafc61226810984b80b8d29b3db5e9103609e1da2847f3d35f13fb1e532163a1d8fa2e15e942a87d3cf974d4348fb081e02596f5de6e595f9","ssdeep":"384:9jpXSVRS3on+X4afN4zWYoQ4luMbvBHix9:9xSVRSY+X4M+WYoQApbvo","tlshash":"d75282de2b601ef18ec8d7d7be52505e791fd5f32b848e68c298cf29b8d6458dc84842","first_seen":"2026-07-16T11:27:37.676682Z","last_seen":"2026-07-17T09:16:39.620245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/hereiam.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.209Z","timestamp":1784279764209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/hereiam.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/hereiam.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyro5xwu76n7\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3w%2BsTEYvEubW4gSbhB3XIyczXbTTSFQsLrMfHcnB1EDsN360lNgE6YZ%2F5pknvzzqWKlQK4lGrgcGGH17AP%2BvyxFv1xtf5mLGTbZGBN3a2K95I1XzaVvDWIi2WrzeQeyuw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e5cfa5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8611,"size_decoded":9618,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"3369036d40f2d2647b8980be26cbe480","sha1":"10c6bb33925cc6b7282eb997592acabb6d7d024c","sha256":"ad7c56cdcad4e6385e72bdae5b527de19781070e5af6a69037c3a92376a1b19c","sha512":"6648e4178cee3567600efce622c36240498a8bb468056a3d9132cc7ebd1a31b37318bb743b1801e21a70af68e2c3e0c4b7734927e84f40e753851efd3e167210","ssdeep":"192:Aue9g10SF5dt1MTMtlwiYE9Z+/uUshik0zVFWEa1urme:Au800udOEK/ZsYzvWnHe","tlshash":"e002a0521623db15ee3c6b7117056f496628bd2d2b88cb27f8c74b980bb84cb5a3c7c0","first_seen":"2026-07-08T10:52:35.079044Z","last_seen":"2026-07-17T09:16:39.623776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/top-games.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.212Z","timestamp":1784279764212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/top-games.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/top-games.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvgsc\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3SBVM%2BmoeEP47RlhWg7xrctONrjWEYq7iFrvUuQo1GORiRA3RdxHkMTAr4C1SykcoR5FSIzyMnbB%2FRtnFDQWsMhmabi%2Ba6XPLBviNV30zWHdgw6EYknkyrkzaYwm%2FcDew%3D%3D\"}]}\r\ncf-ray: a1c8254e5cfc5695-OSL\r\ncontent-length: 538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1020,"size_decoded":1556,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e86359ad93782bc650ee33b0cf8e7b85","sha1":"c235634ae8fd991b8dba3d443f5cc58c483e3247","sha256":"31da344c726c8b6a7a9ec3baa551d8f18b7f7a8acde6d0ca721a71985e0df748","sha512":"40ec0e6880c7925743f7a5948758def724b7b4dfa4fb87dd16e92b459cc774c8afae2cb53b9a6d760066c611fef92ad23a280ba63ebae2697576b84077276e0f","ssdeep":"","tlshash":"231102f6a2ac57e4d266ef21dc25f690b72d38f72ec8130b4290e91065642368e449ac","first_seen":"2025-10-09T01:23:42.844013Z","last_seen":"2026-07-17T09:16:39.627308Z","times_seen":11,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/peters-universe.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.226Z","timestamp":1784279764226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/peters-universe.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/peters-universe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys4fs9uxnsc\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9m1L6nZ0Lxv8HM3Fi88XYjNlRd2olApx5y%2Bm6imJcn66AsoXwRgTtAiCpqX5gtrDN5Xp9VAxNqFBemkF%2F8yxMUoA4X7H%2BEatbrFlYnx7Q2q8nlLgF4%2FE9XvC%2BfcpE1tEag%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d065695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30828,"size_decoded":31845,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"792dba9c05e9865c7693e80b0e25c6e9","sha1":"93e3a319551b45f5b1015c1a50d6fd150ca64501","sha256":"69123dcb6a6b9f4a82538e41f6b0acd9d05333b938e47efb52607ec11977059c","sha512":"e6a4365a41797dba8f57aa0bffe8ca2cc7c2123b495e2da2f6ee9130c0a55da63a28c1f8b9194a8393fec2dc81852bee6ad39ba5ccc68f3f22273c9544a59705","ssdeep":"768:ok+it3T2RGTy88d724kEQaJfJmcEkJ6uz:oSt3qqyV724k+xJv","tlshash":"ced2f1780731ca0ca5ae061dc4dda61bd0593fd8481e0b562453a7d6bb44bc07f79bb3","first_seen":"2026-07-17T09:16:39.628427Z","last_seen":"2026-07-17T09:16:39.628427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/fishin-frenzy-megaways.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.236Z","timestamp":1784279764236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/fishin-frenzy-megaways.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/fishin-frenzy-megaways.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys1uwoh7iwz\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFqsa8rQZihb4ovHb4UkNAfYXjBWreyS5YF2A3OcYf5qbW0KmS%2F%2BAaLEtPviW7L1gbHo%2FnZaQapwkmYG49cS6%2FGe2EpEcymaAUgKmfaKYGeKBFH6JZ1fPL59Xo7QnRJUfA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d0e5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24515,"size_decoded":25537,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f6f6fdbb32e61ac56a202e472ffb1819","sha1":"e584bff847f3c2b2561f1d3ddebbb2fb438d72b3","sha256":"3a780d4991263b62f5d8fe474ce0c9477d289287ccbf6454cfceb199ee2417d4","sha512":"5dc8e2f24bfc0e068f271b4698ff756ec66d5fd0e370afed5a5025f7717cd9c90728df06a09d58972ca71a83bffab8ce292457e45a70657a55358c0d5ea45447","ssdeep":"384:6cS0mjGrBB4GAPgAXLu0SBvPdBk0cSzy8z3BzYg7fPiG+XLrSj0x8+2Q7:awB41U0SxPdbcSu8zdYgTiPb2VrQ7","tlshash":"80b2e11432440f2ca04ca379281fcff85bc9cb01fd81ce6c6e671a5117dfb9625ea165","first_seen":"2026-07-17T09:16:39.630879Z","last_seen":"2026-07-17T09:16:39.630879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/enchanted-unicorn.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.923Z","timestamp":1784279771923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/enchanted-unicorn.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/enchanted-unicorn.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys1q57osrsx\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXfpZdC1JI4eFoNq9gWTYa1utkMAs1eYE%2FWbf9cD5AlHxMt%2BOTLgSAkjW%2FJNhORVyCXKVCFxgwcEQre5fObk%2FENyqdWTXed3zV9Rqvz9IfaBtPlIYkebeZNvmQO2bK1oLw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef45695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36033,"size_decoded":37050,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a6f9e20852590c057d7b766fac8f5bfe","sha1":"b640ac2a620cd5fd5cba3d485418e98b83041e01","sha256":"3ea74c83a692020e17cd8e069ead1009f3edd291af7a7495cd3ec7c235e660a3","sha512":"ea4107cf04608392910b8961192c1a82e132a1c13ee86e79bc5ca4d1cd6e9447fe3b001c28f408a92bc8880f5f35b25c73f1b5f6277cba8680290a64b029d13f","ssdeep":"768:mr2FJ9r04fzD9GeneQhSDgRXL8BHjyqW0ACCo/:JFJ9gInHX5WHjyH0ACX","tlshash":"a1f2f142ac8aef65e0f98bbb119a9590bf73ff945b4c5380bcce1c45b36712692412a1","first_seen":"2026-01-12T00:47:41.817966Z","last_seen":"2026-07-17T09:16:39.633159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/mademoiselle.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.202Z","timestamp":1784279764202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/mademoiselle.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/mademoiselle.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrotr8s62rp\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7gYXkPX9tGvV%2BS93fR7dlRPBcHK4DrvsoXLvvO1yyUD7iUHCF%2FBUJYFpk8sDt8d7NbVZdeEAUfXKn7a8GW%2Bkzyri9YU0WpDTzYw2K%2BIooOTn%2Bq%2FA2%2BEndmutjKeipHvXQ%3D%3D\"}]}\r\ncf-ray: a1c8254e4cf45695-OSL\r\ncontent-length: 3470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3589,"size_decoded":4509,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fd9313d61c765022217ea2265e8e5d5e","sha1":"df4e773e8edb90be11a5e2ec0bb5600ce305b2aa","sha256":"efcfc40e691c39d7536cde32c563a12c19a314dcaff279792864c1b0c09715a6","sha512":"5049e2ad548909c5bc3a29e63b6cf59177d6c87d4b425ba94033b8e21d3a4442e4936e94af2de1ae88ae9bbd8265edd28d3c5315ed3d95e1798e93ae0e75347f","ssdeep":"","tlshash":"ec712c23fb22d40cec7ea4338d3aeb5c57219a50440a4b5699b6ae120f2f3d10d5d5d5","first_seen":"2025-11-17T14:16:40.583265Z","last_seen":"2026-07-17T09:16:39.635607Z","times_seen":3,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/hit2split.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.239Z","timestamp":1784279764239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/hit2split.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/hit2split.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys2nhh7kbw4\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coi6fJC5tISpXDsa3tLcxvYpw2W5cu0dk7m73wP4wpnzR9leJC6lFpGqhk%2BH4GFkJrJ2wIsKQGFP%2Fvl3sTL0PceW1QokqbvM0cd85PGD0sLZG7fd1avortV1eFXPtbHKrw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d125695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15412,"size_decoded":16252,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6e3c4dfd309107786200a3a2b66da5e3","sha1":"e1e68152a77524275b21f91b51cdb3e6ee66db6e","sha256":"86dc05c6981d869c4abdb1afb9fc6af85cced0e62c53c566f076709d473290ee","sha512":"eb426a78a594f5c9d2971d7193ed736f41242162d8f428e615ffc3b55da71df0ea33f9b8af2fa493127d66443ad9c5e679f1437f17281261323810f706c1fc89","ssdeep":"384:gD7OYun+0wgmk+A7NyMC6V1FmvCdrK/oxLdtZExemVfZI6K:WOdXwgR+HMC6/FmogqL7ZExhC6K","tlshash":"7762bf64bb02ae55e93f79b1bf585ae9cb14cc22bf4383090a4d25511319c6c6e926b3","first_seen":"2025-11-17T14:13:19.337631Z","last_seen":"2026-07-17T09:16:39.637921Z","times_seen":4,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/3.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.267Z","timestamp":1784279764267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh911l\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUqcbQXI8llwsgbkYDH%2BYoOqFxlnoti6GctTBp3Q%2FJUSNC%2Fr7GhzImdCUS6bJCAXx4GA9MUL%2FHFy1s1rBNxRDlQopmy5H3W7Lp7G9UhbEvoyVYaadjIGC71OnYDiE6hxxA%3D%3D\"}]}\r\ncf-ray: a1c8254ead285695-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":1710,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-17T09:16:40.294936Z","times_seen":64,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/live_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.268Z","timestamp":1784279764268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg1y5-br\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tvlm%2F91omUh%2B2LUR2GqTTm9vZ6r36Not1OK7zTFoBy6MdBA%2FlCkZvowbpkXDkpMHdFWEapS8g79frIG17qYVS6afrKr4wvA%2BPwY7cyTFeDpzvQ3aDVFyvSXhPK4OibTRA%3D%3D\"}]}\r\ncf-ray: a1c8254ead295695-OSL\r\ncontent-length: 914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2525,"size_decoded":1929,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e8cd6f706a0213487d03daf932589f4","sha1":"c584f60bcea1440d7a06e73532078d9fc810a9bb","sha256":"78a63837b7e89bb74477547696403b1655d8af013c2b204261d35da6d22b2687","sha512":"4c028584c6821ff55be11fdfa8fb377b1d83ef3c902f41b870e11b458c0889ff90a937264105678c48a9635a1fd98c656132c3c3f8ab35b744ba030ae3d3446c","ssdeep":"","tlshash":"dd51fcf2e2cca3d05402dba1cc12ad21b64b6cfb67ead39443b1fd646930126588d8e8","first_seen":"2025-10-09T01:23:42.833167Z","last_seen":"2026-07-17T09:16:39.640564Z","times_seen":5,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/karaoke-party.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.986Z","timestamp":1784279778986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/karaoke-party.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/karaoke-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys3bat5jmec\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGDuBUVeiteGp1xrP7U%2BtMEoWmxjkgM6aZLNyysR2vJu0TXVuHJ%2FKgIeEC68D3ylA%2FVc9p5l5vQDL4T51Sv2d6KmojCQlRuyv4ED%2FfH7X%2FWmy%2ByYebWejS1YHi7SBwEDLA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91d5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29028,"size_decoded":30045,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9d5a1f119af448a3defcb3bc9e223100","sha1":"35245f0498362bf25cf42fa00379221819878587","sha256":"75ba3d4758e6a737fd22fff8c87a90e98bae76ea1bf074ef35676559f3718b88","sha512":"79817ba9da2a0a3a4c56aab71307c6fbe16a87d979769e61c6b5af93a663435ec4bcc40504ff8f58b8c1be2ed065e4457e05d01ec5885ebb409f5e7831534c41","ssdeep":"768:4IeTcDmA+Uckw9j3Ud3l81X/U+KNcf9mFVvEQxyRZBUZ:4I5DznckwV63lGczNk9mFVv7yRAZ","tlshash":"a8d2e12e1fb04974db2d727219e1a3a3cb08ae0157116998d9b043b0939d529ffaff19","first_seen":"2026-05-13T21:36:15.908891Z","last_seen":"2026-07-17T09:16:39.641453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/adventures-beyond-wonderland.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.934Z","timestamp":1784279785934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/adventures-beyond-wonderland.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/adventures-beyond-wonderland.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrs2g63wpqh\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FutNuooZ%2Foq%2BmtjgZfjtYQpBujrjbsoQc3crE27YPftPH%2FSJVIj3J6yJHDefvINCL7k5rHEAd%2FQEtWUuA%2FkcGqJFYg%2FDHkAmPn3n9DuSSroT7n%2FHeJpuv7TKC1O4vHFrw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d61ad45695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33353,"size_decoded":34387,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"457d95f6db8b0bc7724f4c58c62f95b5","sha1":"6177d77cad01faac14751c31597cd355109793ea","sha256":"21f31ae89a776242354c372d17c3292cab30efabce03c4d040fe1e73a5fbc5a2","sha512":"454af9ad8ac306aa5da416357547a1dd52857d0b4522a5251e519659f4d8186b98131a30a95bc2885949aa09b64d9d2716528721070efa6f4d47fcb88b9e860a","ssdeep":"768:r8oh/Xzew9G2JrUptM7ttEJ3Sdo8Y/6qdwKLM7lUbiD12Oj:Ioh/zew9G2lqtg3EJ+fWdwl78vOj","tlshash":"51e2f10796b97151d83c97e434090ad9e099ef402e35fa5d116c0b4853bebd935adfb0","first_seen":"2026-07-17T09:16:39.642288Z","last_seen":"2026-07-17T09:16:39.642288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/goldbeard.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.944Z","timestamp":1784279785944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/goldbeard.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/goldbeard.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys2bkt8koy3\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=isQFlColNTTXezgW3mkFcj%2Ff0mvWMIlkxXqyyBgKetYzKZkveu%2F5tvUmB%2FYaxtlBov3dutYxg9%2F6BQEDcgfZIop%2BkjIMzDP9YnhRxqoXV0edTFB0VFlV35kRwdssWICM7A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d62ad85695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32331,"size_decoded":33342,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9a6b4246ae0c5d983d0c0e85f83494cb","sha1":"49e70a61d244c65e33714d9085c4b100a3053602","sha256":"e2b6e01240bb4d3f7a75e58bfb75f95435bcf320fbe2727a879c37285a28a25c","sha512":"6b83569a83deee4a57a97a66ccfa86a2d927ae262fbbd45efd310a7a19be103af834e00202243a797da6a494a3a68c1361f04294cc75b24e1a357157045b2b3d","ssdeep":"768:WVdkvagnUZMzdDY967yNWenhBLi+itluIiL/q0AY9D/:Wnkyqjp7yNWahNiXU/9n9r","tlshash":"e1e2e1b738985d137a4c8db966ed0e272286de4075d13aa5fcd38924473a0f794fc91c","first_seen":"2026-04-03T21:46:18.170176Z","last_seen":"2026-07-17T09:16:39.644263Z","times_seen":4,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-12.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.257Z","timestamp":1784279764257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh92y3\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQsUGKD3%2BF36%2BTKa51QA1gWg8C7so9Uy44c6KSK3WrHhEXOlw1Gz%2BG2qVbyjvYqT%2BK8DWVS%2BVYD5z4vSSGyEdt81ht2i1T5E4x77%2BTJ%2BY0VG1BQFTSmcnzeYE8%2BoEc%2BACg%3D%3D\"}]}\r\ncf-ray: a1c8254e9d215695-OSL\r\ncontent-length: 1712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3819,"size_decoded":2752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30e431e21ecd7dd35ddd481c6b6beee8","sha1":"e7a4a5aceab4c195dd83b6f4498ccc48b6391adb","sha256":"6a811e3641caf0ef4a2e34aeb9b63ea357ce280558945142b4502ad8ec44e4ed","sha512":"1daa6c5861666250f52a9c2806555599767a6583d3c919a8d8a62d3b29ed9afc8105f20cdf8d20567b5b38663931047ed23cbcf03b23b0b63b5211cbf4796f75","ssdeep":"","tlshash":"a17164fbe785a2f19405d7b0980284b6b3af3c7b77529b4543408ad4a3661a8cdcdcc0","first_seen":"2025-10-09T01:23:42.72504Z","last_seen":"2026-07-17T09:16:39.645193Z","times_seen":11,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:10.637Z","timestamp":1784279770637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:10 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NllQym3NgMtKypoUBc1ci2rPhNPlfVD80GyDlsEZ5QIsEfZ3ecna9yMCcORo5%2Fmp1kC749g0xd34fgsFS%2BlRjInipFzfADT97%2BrbIUdakhj4NncyamBpjlUToC7Ch6VJxw%3D%3D\"}]}\r\ncf-ray: a1c825767e765695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":94,"size_decoded":1037,"mime_type":"application/json","magic":"JSON text data","md5":"cb32222e071963bafc9e6fee87569de2","sha1":"9eb79a3ffec3307ed17eede066eb5d07588e5df0","sha256":"867c2c2daee46eba5bf709cbd1630729c42434aa7e34cb2ad46fb411981802d0","sha512":"9f93c382ca43c4e665d38f83f2644ec5936c6f2ed4a2423ec6c3fbbf87825cc0718e55b95dc3a710536d482fe71451263d50c9585ffd601176adfdcc28711e33","ssdeep":"","tlshash":"5fb0128d5440469d25237c049db671b8505809c3329c0e30168848400939003800bc00","first_seen":"2026-07-16T11:27:37.697277Z","last_seen":"2026-07-17T09:16:39.645969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/jade-heaven.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.914Z","timestamp":1784279771914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/jade-heaven.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/jade-heaven.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys2ze56jhyl\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92vk6O1ZNHvNKGxYg0bT2t8IfJIUiIg1kaJfZArrGT8pdd5ASSQ4jhkcx16nlYsnOy%2BenZ1AkFkn7XrzijMmdLHBWqGuVEz2Eb1gc9l3SwbPJy4zFtfNON4LmUPTyJTKEg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e7ef05695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23277,"size_decoded":24282,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"2233d9e0a0a4c118e39312e9e77cd2a6","sha1":"de2570102ffd1db28bd10fad443cdf53d4a69298","sha256":"45b2b81859177e9e2405a9b89a74447a31825c51253e566bc4399d980c61940d","sha512":"9e2d2968f8b00e42de01398a314fa8c90701bf2ea81cc036cd400ba9330fc1adfb2e8d793bdd598edd0b6a341b8de2d21df6837fa6e8367d3c1bd523bbec028f","ssdeep":"384:fxJdrtbQmCnigZPVc320JMSKUVw5BSwTucb1lKAeaF9UINdnaW:fxlb2iotcgSKUVwfSwTucb1lKAe09xrV","tlshash":"a3a2d014a212c7f5ec2ed270d6a065dc9f9a6128701539ff236684cd93bc8b42ce9e17","first_seen":"2025-12-25T23:59:48.601522Z","last_seen":"2026-07-17T09:16:39.647677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/ice-age.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.920Z","timestamp":1784279771920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/ice-age.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/ice-age.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys2umoe5dmg\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSfmqBVCQ9ddUGs%2FYHt1J2%2F1OD%2FQyBW%2FfFMOiTS8Ep%2BQ95IoGETsPBdzSduXZyXvr8dHRrmHc0mGcYrLEUqCHVTWCigIpbdIfnw9znm%2Fke2aZ%2BCULOCg4JW7mRph5bbpzQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef25695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17656,"size_decoded":18669,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3d093b1c59d52f8f604f5ba5735f3e7f","sha1":"c5f5a27795de2dc8a65856ede11086134b46d534","sha256":"a508c207850e1f62d532b550ba45ac9a1ef10f1118657ec2644d46e5615ce5e7","sha512":"fe4e761b27708804b4a38e053d533c64aaeec8713fa63c0dcb248f61704696c1bd6a2b381ad23b2fa13d00c6f7268933a1d2d7e1cb294eafae9f92772467488b","ssdeep":"384:PLi+oCFjQdekNQ7xJxX5T9k1qRQGPxnIf3JzT9Y44eh:Ti+o6jNdJxUqRxxIfZzT96k","tlshash":"c182d0a241d28d56e51feab2c41cfe29277b1d291527fb1bff2e4484432c6057da6232","first_seen":"2026-05-04T16:18:30.9125Z","last_seen":"2026-07-17T09:16:39.650255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/throne-of-egypt.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.936Z","timestamp":1784279785936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/throne-of-egypt.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/throne-of-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys63blpvoih\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlWTz20qeRMpxeex9pFccO3VkKnEZ6we3bxWmZJi8bvksFrLA4ahrgmM9yXBGYl0vi2wnHTLItrgkD7cbEDW4LfI%2BMzzfu6eLlD3kLFI2wG4uOPCDe%2FTseGhaBZ86lQMkA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d61ad55695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31769,"size_decoded":32780,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"06da8714372ab176b518718573e57889","sha1":"ad1eda3a92a311e27306c8318b5b5c71193fa19b","sha256":"fe129283ab45cea751706d8675018c1ced043c64e917063d5165505e2f5835f8","sha512":"8cb9fbd56420572ecdaba202249a157f70fbb1b2c591f357edc1aa694e21f59f7e920303bd3dfa8dee4bf3fae632705c4b4e757798a4a34bd56d33a2f933b6ae","ssdeep":"768:i8xFd9PScm0Y3uflYBX8jGoOczUxz4HUEuq:i8xxPSLz3Wl4E39Yx7q","tlshash":"f8e2f1c81f0304be9e7e1b74467f2392eac204e82467f676d50568492b6f8063f5ebd8","first_seen":"2025-11-09T11:22:30.347688Z","last_seen":"2026-07-17T09:16:39.652479Z","times_seen":4,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/swedish-pixie.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.210Z","timestamp":1784279764210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/swedish-pixie.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/swedish-pixie.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrqvkz0b63p\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQhqEuk2pjX0ZS1obiqrFmrPOtp8AxM2v9EuOm4CUzjyt4%2BzEQbvW%2BLxTl9yAfFyIj9lyX2wtQH%2BLexlB%2BllkncwXAG%2FHxSvcF18hnATDVFpsafanngr%2F7aQLED80eQKdQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e5cfb5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7909,"size_decoded":8928,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5609769f494cc3b8ca1bfc3f8292f0f2","sha1":"552e45c426a46546bb9130f34f8650c7cfdcd2f8","sha256":"25e5ee8e509480817005b08e5026c86557b688af221ca07ae7050674db0ae67d","sha512":"e5b3fc4a653a85faa33c2fbcfe00327cc7e4e851aa56eb4179d4ab36027446e0029dc6f778676b6013273a259dc7446b6dee0e493ee2ce51a50669e07b7dcf22","ssdeep":"192:LRohy+AjcLRd8s/J0yyExCZTRVaXmTHFE8l2oH:Vky+Ajg38sx5BClvM6FE8soH","tlshash":"e6f19f7c67126920c68f9379e1fc65d4a928eb1e61f4054f00800cf7a72d502b664fee","first_seen":"2026-07-17T09:16:39.653304Z","last_seen":"2026-07-17T09:16:39.653304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/1.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.272Z","timestamp":1784279764272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh91be\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ5O5e0fZ%2BGddcS5vX7Htq2AM3dZJDmC17JVp8a2twpxRJ1lEPJ9FArKBp140oLz5qLpu7ceuvyTK6VVRF6GKbW6RFM7o%2F%2FTdenvulQPTmocRM4RuaPncARSpnsL8vGPLw%3D%3D\"}]}\r\ncf-ray: a1c8254ebd2d5695-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1727,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-17T09:16:40.271159Z","times_seen":77,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/luck-of-the-irish-megaways.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:08.932Z","timestamp":1784279768932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/luck-of-the-irish-megaways.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/luck-of-the-irish-megaways.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:09 GMT\r\netag: \"dicpys3n7h4jpx1\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pP4%2Fkzih%2BUGwvIcTsiSgJUrnJcE%2FAMrLgk1lQHcU4KL1cN3Kpgg5Yz8iKP5OQ2GCrdZH5YTRq2wlyBZEV2dUyXKTODiFUzTrBGDVlFMUF8MTlMkGz38GAESMbWTYNmGVdA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8256bde325695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33589,"size_decoded":34613,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"6375493a84fa5a017150c92f9a68d25f","sha1":"234c4d35f7206c7e663e8f59c3937c383427e7df","sha256":"2282abbce28c76407eee46ac8f108c2dc4bf366faf41116e3c55836f523d82d6","sha512":"66dc22327674aec2c333e509580636f606b9d2f228e2e9525bc1fd55824e4f1b168c61151551245369df85187bc8eb6e5c10d8bd287956824cb4df9c425de06e","ssdeep":"768:gZV9ymAcmFBOW9wrtsQR9i8yEYtmBp9hr26LxdGy:gR+HatNR6kpLr24d","tlshash":"aee2f1346fafc48cf098ba144319172333697951d2f985bf6e5a63436b8d2f0b501aaf","first_seen":"2025-10-14T14:51:48.981845Z","last_seen":"2026-07-17T09:16:39.655817Z","times_seen":3,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/battle-royal.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.952Z","timestamp":1784279785952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/battle-royal.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/battle-royal.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrw63mk6s62\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4jZUp8usVjtm4LLyqkrgk5zRebJlhor7332d13ClO0TD60vJH021s4Rt3ZqX%2BtJURhn6fiu14UhW5lx9rkWn1EhHRCrN401vPrNllJ6zpV5qQXPIXDyBFgB4J9Y81xoTQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d63adf5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36506,"size_decoded":37512,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"765a2273daadce73581a122fca9f26a7","sha1":"e41c9cb7bd0319093613be819b03537982755819","sha256":"37bae9bb7831724fb5f92ce98361eee9170a56b9a6b8f90ebd88fef3ff2f673b","sha512":"8733d6a655dc1053761029cf2f8963cf37897dec41d445c72f85f82e76282e3e971199af4fafb80ce1971ad0b8ff28ca1c5a69ba86d135e9a259558cbdf7c9a6","ssdeep":"768:vUDh8J5VdRlvtJbN78oz8mtDBKjb9ScApJk+2zIjQ1g1D0tr+2fqvWH:vUDh8fRlvnbNYoztDBgb9SBpJk/wQ1g8","tlshash":"84f2e1e7179cc4c4ceae25faa7ea4d8ae35074180ab0bd853621c586c7ef406d468fe4","first_seen":"2026-05-02T07:27:26.349013Z","last_seen":"2026-07-17T09:16:39.657822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/2.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.273Z","timestamp":1784279764273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh917d\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4X3tq8DsYf0TiFygMr0UHYPx4TGIIP8uwajjU3KI4fUmy8EqgmrkwfTgLvdD2n93mOm5MIaYHzzp1I11w4Kdylfr%2Bu%2FoRjFKh%2FQXn2MJxW2BRnIX%2FmZ7IpbtgauGnlCxBQ%3D%3D\"}]}\r\ncf-ray: a1c8254ebd2e5695-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1636,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-17T09:16:40.368129Z","times_seen":71,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/apollo-rising.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.939Z","timestamp":1784279785939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/apollo-rising.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/apollo-rising.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyru1w5xtqm6\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWbir%2BR6OrGc57oLjflQIz9zW7ovK4crYUC4Pp%2FvaBNxUaWYzQeHVYvq%2FVrmf9WSQaaCG9GIJd04Ojy%2B2MuYmq1OqZ6f5dlFw%2F%2B6v4Gep%2BqFt64Q7EKvPTL%2B9LrsHhzoDw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d61ad65695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":35515,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bfaaf6599544338fca636630b622fdc5","sha1":"6cdade3a68ba78e464189eb982cda31a1d6d5df7","sha256":"ee12b052d4fd9be981ddcedd9f61653f07cbdd0f63826ffaf3756b1118d83be7","sha512":"117729b16a45243a6971324a865cea30a62835e494cfa32d7b8096525781b2efaea8372f841d3f9105ac78474be28a760821d8e8654e9c18af8bba6f310e31e3","ssdeep":"768:Fqhq8A/l2uKfgk6uEEtCbGtq1vYPz4h7FuunaMO:Fq0L/IV6uEEsbGtkvYPUh7Ry","tlshash":"37f2f1a3a94bdde5c38e693a227b16143d81ce242274a7811ae42c32e77e5cdf91b047","first_seen":"2026-06-24T10:21:12.922079Z","last_seen":"2026-07-17T09:16:39.660056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.176Z","timestamp":1784279764176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 19 Jul 2026 09:16:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxLep8iyC8GF9JDhOtYzFBXqxqYaCL4XYhnu3wnxr9REgivCgWhBivh85tzkafz85xHIA%2BA6ce6eVYbjwBVOaId4kmKI%2Fp77qrnJ7grSND1U8DOy1V3weydPNWwxafHb5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nserver: cloudflare\r\ncf-ray: a1c8254e1ce45695-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T11:43:13.928122Z","times_seen":399537,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/daffy-girl.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.206Z","timestamp":1784279764206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/daffy-girl.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 50\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; hit; ttl=1750; key=GET-http-rainbet-no.com-/uploads/media/avatars/daffy-girl.jpg; detail=REDIS\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrll2bgh4l5\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hc2Qe6tZfXhwYrj6uVHADmtHXNgMw1nOoo6wntSlfMAIcgUOBok7mb9RXuH7wqa8jUNbI4qvYZ2Qprsdn9yFZNhoDdYz8kRTXnS0CmvFVltItdu7ycq30NltRg%2B5zPiajA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e4cf85695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5945,"size_decoded":6974,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f30781c2f491528059674346b0a93597","sha1":"3170170ca772579371129057806593cf6aaa74f4","sha256":"55650c22a8cccb0b5a019998f7a1d5cba40be75816e333c24fde51e476b49df7","sha512":"7c5d88ec4a53ec0bf31783a592672032d31a0829811d41aeb3715978a1f6c05285ad7b8fe9c68314982d1e181b9312407c29b55081e204c72b8bb4ccad56140b","ssdeep":"96:KlRlV5Hx62aOHqTRQTwmaCBELw0v7C+1g0tI3WuboNBG5MJPfUbBcTIW:KlRH5HYkqTGaLwif116WusNBRBfUdcTx","tlshash":"11c18c2477e0f017fefd14794e698418131e784459818faf3e822e0d57784fba9f850a","first_seen":"2026-01-01T08:17:55.702811Z","last_seen":"2026-07-17T09:16:39.662497Z","times_seen":4,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-16.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.264Z","timestamp":1784279764264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh918e\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54%2BQLcgr6Rw8geMzd%2FshAl0G17Tqvp%2B5LsAB34KRmi8FuvUfl9ZIvHaoxozi3rHNmJyCDbBdOnrbf7t7xMB6OHQ7ngkzNnFlJL9iIqSd0jWHT2rU8SpBZVnfsQ3wtjJjRQ%3D%3D\"}]}\r\ncf-ray: a1c8254ead255695-OSL\r\ncontent-length: 748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":1775,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeb4aceb83ffeee49201ed0a7383e22b","sha1":"00ec917ea123097989a82bbbe5abf0ae4ba0d54e","sha256":"93a4d47b29f716426b61b8652a459225f67e18c7a909dc258a112c62e92672ef","sha512":"7d3a55bda27bbcc4800a5aa5026c52a2004f77925d36b26d0aa9553686e9b9c8f0d4120788955d1a19b418b1d1a3d482d98b65559becccf46b23fe8fdafe8da9","ssdeep":"","tlshash":"df3131c9f2cde7c5c747fbb0d933646429463cba9e16e21943dbb2a496080ecd17c988","first_seen":"2025-10-09T01:23:42.791155Z","last_seen":"2026-07-17T09:16:39.663226Z","times_seen":11,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/favicon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:05.064Z","timestamp":1784279765064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 611\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; hit; ttl=1189; key=GET-http-rainbet-no.com-/favicon.svg; detail=REDIS\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"depnh2ew9bswo4\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIPc00u6fuN8P3hFXjkhV0EhviD%2FGTVTTealMpHkOmLaHLiriZDRahspoyHi8utjBmcCErC8OefycGAJOCTBCyJp87iDKRvUroVRtCod%2BCC9uhm7L1uVUKv08hpeShXIXQ%3D%3D\"}]}\r\ncf-ray: a1c82553ad815695-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1619,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-17T09:16:40.370789Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/panda-gold-10000.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:14.907Z","timestamp":1784279774907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/panda-gold-10000.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/panda-gold-10000.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:15 GMT\r\netag: \"dicpys4dejgqolf\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLFy4eg1Qt%2FIRWOUkGD9fe29VPpR1%2B%2FCV7vzzsUj4%2B%2FJ0S1m1IQk33S9t3c3k3WD26J58t5AeiNU5RZmkMHULzENqXreZMi957Hse7vS2oMc7d1zw6e4E2%2B4%2FnSYD6aSqg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825912fec5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31875,"size_decoded":32897,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d9cc62bc4d666f7fd187cbddeca01512","sha1":"bdd38ce2a6f926fb2aef4090a3e897212d3071ad","sha256":"67d99decd50d1c2d23b0081c4dbfc76f6725c4006295e6483baff97dd78fa64d","sha512":"ac6ec63a570c06980b965445d8e042794c4f31fec00786b26d5d93c752e78b7a9e212f09294d8a917bf080d1c764abbbc741357c3233606fac4e30011bda13a0","ssdeep":"768:A+x19nv7VFJLwWXqQvrWqUO7hV8CPB6W/NcgnpMLbphCs:J7NLFVxDp6ecoMLCs","tlshash":"28e2e1ae327d4115a0bc173e623ce57689fda90133861ac8a2b29bf6677d4c944b21c7","first_seen":"2026-07-17T09:16:39.664473Z","last_seen":"2026-07-17T09:16:39.664473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/5-lucky-lions.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:20.919Z","timestamp":1784279780919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/5-lucky-lions.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/5-lucky-lions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:21 GMT\r\netag: \"dicpyrr53wl3r3w\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoHG%2BCTRjfqyWot84uAT5auY28Kb7v62nHIZtcJTE%2BDmivSV6kYTV0zDDGU3vNpM%2Fmm1gFnhcfs3qm0xZtxbQkHxAO7BEIe6nEJV5y3NnIrh4%2BF5n34GkfMNkz0DqGPFKg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825b6c9945695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35132,"size_decoded":36145,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"4e28e0992bf8882980335289436b4bf8","sha1":"7c4096eeb1143b4ebf8184dbf1d104a820563e2e","sha256":"3811cbf3b1d9c5761b985e5fc01af3ee75b041f6a859f9dc37c130979bcc705e","sha512":"b618df768e8d0968e32680def428ff04ce491615cf63b45911321d7387000a02c5a665b048f2a80ab73d996367c38978a70df54fcae507be23095ce586cc6b79","ssdeep":"768:SudpPsZ3hepYiIIgn7HnRgnWJt1kD5Qb89VyxvYtxGnVjIVbT9fv:BUZCEnRgWJS5QQkvJVjIVbT9","tlshash":"38f2f15e3abd3c56f6bf192a91cc843109c9be7d9739e111a5d24a3a0f13814c9b3db8","first_seen":"2026-06-01T01:17:45.229679Z","last_seen":"2026-07-17T09:16:39.665891Z","times_seen":3,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/go-bananas.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.233Z","timestamp":1784279764233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/go-bananas.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/go-bananas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys2972uenig\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYbCoASmhqWf0pb8VPaR6EEZiHyYv4xaU45FCAz1bHJMJWIF36hkiJQ9A4KQLqilTgSQ9GVMEOk52wATJO5ZJXusPc%2BYzaUvemZc5%2FWflR%2B2Ola%2F9ug50lih5fhSeS7KYg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e7d0b5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30472,"size_decoded":31482,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9c52769d1f978cc35494883242f5df15","sha1":"678978cee19d94e1095ad77d5b8e47f2f05543cf","sha256":"4a58720fef4c9734757fe9d0d38829c2f9c34940cfb8c078dba9b7282eea4e2e","sha512":"d8463ed9a85d3817783201af23fbb71f8457fac6985c8e0114d798f4e22d3d99ef0039b5b2554d26c10c48396507a5c818187baccf1a495dd429f6f1a256b5f7","ssdeep":"768:eicya9/9qtyrd2LC+w/nDDRKtb9LkvoVA9QKhc9Y+7z:eicyq/AAJaw/nnR+JkvoVA9Qsg/","tlshash":"22d2f28e7625189170ec523f4745f92d46b94b5a51d2bef638e3ec3423059edc2357c2","first_seen":"2025-11-17T14:16:40.580888Z","last_seen":"2026-07-17T09:16:40.237934Z","times_seen":4,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-2.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.244Z","timestamp":1784279764244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh9164\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dEAwMoYark0Uyq75kVfXRZzIxj8MlufUrGAx5Q9LRxEW7lHPQBvoIfHAUUOwLjpIKOSdCHnjjJqrBfK2RJC%2BC2qIHtECX94G2kTNzXly2zuHQTsibMjM8jmHpegr43bHQ%3D%3D\"}]}\r\ncf-ray: a1c8254e8d165695-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-17T09:16:40.349953Z","times_seen":56,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:10.595Z","timestamp":1784279770595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMmcBU%2Bp36P3b%2Fr%2FdUou8ryQcv%2FBZ3Uj5oJyQB8SkLRaz1irTAkU7%2F0aXxJV%2BYvNWx7lfxqUWK56EonjDbsypVqKSmneYM7rnIOyJkYE%2B2FRX7qJt7vNI1Jv1uXUj5apBA%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicq1uxec62b5z\"\r\ncf-ray: a1c825763e745695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":1184,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-18T03:24:45.619013Z","times_seen":109,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/tennis-stars.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.945Z","timestamp":1784279785945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/tennis-stars.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/tennis-stars.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys5yk4xhn7b\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9hmWRzNsbSYtPXEm5H9nOQPN57IIFIRutppIIeupN%2FZMvlMrTTYCFelBHN%2BtH8CvMUrsLntqC9ASNbCoi8Mi%2Fzc1w72lFvJLkPPmrT9RCU%2B%2FXHoxYS%2FyhJeM7foU5sSOg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d62ad95695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30071,"size_decoded":31087,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"38ba7b9bfa805c8e72305a60dd432afa","sha1":"a661057fc314678af4b248e27bcb67874db8eb88","sha256":"4c535318bedaa2708607b7c693b01468160334035ef7a20c9952e5571939b460","sha512":"5a74b40f76731c87c10b2958c23aa5957a6d0f2573e0a7aa199c43731178547cb2448832fbda81cccb7ad4e36b6724c536d69aab49a0ffa3d9e16d9f3247dc53","ssdeep":"384:PZEp3sFas3j8VJ0nFfD/aJDPVRN9Z6wIANjO8LX/+P050fRQliITKoGDgdvFr7H7:P+RsoJ0kJDPVRTfICOMUG0fRQL+A7szW","tlshash":"39d2f10e366eb4d6ae6f0bfb75f9c577081c02567382056b73421ca807a97ae3b84193","first_seen":"2026-04-29T22:47:38.117575Z","last_seen":"2026-07-17T09:16:39.669741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/teeder.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.194Z","timestamp":1784279764194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/teeder.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 49\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; hit; ttl=1751; key=GET-http-rainbet-no.com-/uploads/media/avatars/teeder.jpg; detail=REDIS\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrqvkz0b5dn\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rn3Fa1wRW95chXbJ8FW0e9sZIcjUGtkzPeE15Okg%2FiBHsYR94bG8VvtrqGfbVOdV634z8yzUmGmCmlAGnllL%2BTfjwZvdKTXWaS4wzgBuuHMillvjrkABMAfRZfDssJo%2FQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e3cef5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6971,"size_decoded":8000,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"88f99df5485f445806dcdd14b3727621","sha1":"378fae93b759029406243b442bc0fefaa4bd5b08","sha256":"5e57a76120c882540114f8912b8d16f4ae7a3bba8c1aeb13cdd2221e820b2e17","sha512":"c3b9b40a32b2695a4279bee98f0d6c334f676217768663e9461969db675b82d2308d485893e0bb746a87f4a70fa166fba9eab315e91e6129dd39d373f95630de","ssdeep":"192:gudFmX7Yx44q1Y6zDAKSc/n+aFXmpio2Aed3gFzphu2HH2:gud48xvq1pAKxnZNmpioP7FzpJ2","tlshash":"4fe1ae2f9b043e06f9ae62f0555e0a889f594e60fda60c17c9e3f42027772cd99102c0","first_seen":"2026-02-02T10:45:14.62056Z","last_seen":"2026-07-17T09:16:39.671221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/ancira.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.203Z","timestamp":1784279764203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/ancira.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/ancira.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrjsrit44ga\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUAxHiB4hJTsS8Efsv4%2FVd9iT93er1Yhk67VzSLqMhxaHwtOzPT0KGWUVnO6Kz9GUdb8YtPrQpIkC06YMh9qW0%2BMOGMcAtPRgQg19Ek8YG1BnGsUf3B0UPgnUGr3hjXc%2Fw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e4cf55695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5770,"size_decoded":6776,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"56ec8c82295109817b6924c29dfc522c","sha1":"dd6f9070fcfc5c21143c5c14c1e4cb500674ca7f","sha256":"dc08340e7b64dd7039f1ca1cf33b955ed4cd7cd2caed7361d3a1a9c2b1d64400","sha512":"9118cf932ad4cf0908dda01222e91af86b67336361832997c2b8b1a24339baa37d17a14904395a7795c067c3caf1813528aca9c34755ecab18a4af7be49e70fd","ssdeep":"96:5kJOcpBjlflEPM4wKC9+z0J7QCUp1DXokMOllS1T50mzXA/zNlVOn:6TxflEKxyJJS1Wmb4zz4","tlshash":"e0c17de173fcfadaea7c6437260b51612f4bd60414272493b066c9aabb3e0db54a04d0","first_seen":"2026-06-02T00:44:56.474765Z","last_seen":"2026-07-17T09:16:39.672627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/dino-might.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.230Z","timestamp":1784279764230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/dino-might.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/dino-might.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys1e8jpthpq\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIvrC%2FlAhzicEnNGebIx6UA1%2FRKnKgBjjjUPlr8CS9jveI%2FdkwmJPCtRiRTyLnzm7LOTXpoQQKO09Rp%2FGlQmsHM4EaS27ZXvvUMhS08G9CuHLquxkCyqNzFUSQDJ6ylVHQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d095695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22958,"size_decoded":23968,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f5fe6811e3a2e924ba9d79e8c8998a37","sha1":"3b0451c2b3b53364d048484e51a12260650e3962","sha256":"8719d0dc83b888543504cd74579ba45f02685bdb0eeb081de117dcc9ba9e6db2","sha512":"6bc624f6b694147927e26ac0bd919efc9daa86a5aaab1ee91b9b38bd607af0102994a256ee2b9017ccc59c15e88c0e80be29e56b45e84604cda25c4a3ab01b49","ssdeep":"384:YWqArVHCv9GUyeZeie+pAmk9iAuqYIXgPeO/YJXW84q3yUPWJJ35/+/J8hZ1x:Eew0AZeGcUqYIXg2GuYcyUP02id","tlshash":"8ea2d1a2afbe2ed2e2efb135702554132b03c9e036bb21d71ed26e373784128d951563","first_seen":"2026-07-17T09:16:39.674427Z","last_seen":"2026-07-17T09:16:39.674427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-6.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.249Z","timestamp":1784279764249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg15o\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMVRXOUvm3HypoumXy%2Bw8gF07FOirGOccipQOuA4wtDYGIFtX3TyIWXnSLeEbQ4BvRrCDBhDQHEA2LJhUJLu1VwQDC1rkz05XOrlxxM6CcGsOpQWjDRCcOSOC%2BQDgcJbQA%3D%3D\"}]}\r\ncf-ray: a1c8254e8d1a5695-OSL\r\ncontent-length: 672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1696,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b91be618230b01448ed27a66809f3ccc","sha1":"cca8b990a62977e0788fe8d02d604b567b6f6a2b","sha256":"7549b1f139604c51a0352f271b4498d6f94960820679bc1c37c4aa68ad4e5fb4","sha512":"a3421d874b631cdbb1ff2d433823ccd31e084ed210a026a05918341be76251ba56667ee7446707baacd4bc28376b2f80bae29b935ebc0d62a79d82869f24c816","ssdeep":"","tlshash":"8c319ceea1d196e0b4838fd8d4147354399f2cbe3f0cc6598181f6d17d68b5c4488cd0","first_seen":"2025-10-09T01:23:42.831843Z","last_seen":"2026-07-17T09:16:39.675648Z","times_seen":11,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winner/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.594Z","timestamp":1784279771594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: no-NO\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"862\",\"764\",\"527\",\"518\",\"819\",\"417\",\"472\",\"319\",\"162\",\"526\",\"635\",\"761\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:11 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9g2HMy24%2BYlgttp%2FFen05BhD5a4ffKrnSsmw%2BQmpkhjICf5b%2FYDr6ly6jarLq8DvjHke%2BGsIiA8z%2F8vsjMfhFtSEkAjErNbdvqucArt96qjXw9izy%2Bmj%2BW6OBzqb0dyvg%3D%3D\"}]}\r\ncf-ray: a1c8257c7ed85695-OSL\r\ncontent-length: 211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":1204,"mime_type":"application/json","magic":"JSON text data","md5":"41a3e0aeecc6620819e22d3cb70e0412","sha1":"d78a26784a33e4414385cbda6b64286566c3de19","sha256":"f4b078e8735df35727fc25b29ef7452328636036651ccc80f4b837de6700669c","sha512":"88a8fa3a1725e6a375004ac4312aba24cde0e56621ad9fa4bd9e63c7ca4f662d0142cedfea383ac04f9f9d7568742732a94b218d5b8230ad0bbff1b7e3a9a385","ssdeep":"","tlshash":"61f08c162b52a33b759710d4dc77efcd1018ed22592d8038bdbf1aa2d3228602f88a0c","first_seen":"2026-07-17T09:16:39.677172Z","last_seen":"2026-07-17T09:16:39.677172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/da-vinci-diamonds.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.904Z","timestamp":1784279771904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/da-vinci-diamonds.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/da-vinci-diamonds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys19h2xfgec\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdJKtOxwOy%2BsuiJyIZEbqnMNRtH0UcmWdMZOXqV%2F1a3eKRAwKxBjU5JqnJSf1Qp0BPHux1yOM6kBQ6bLs%2FrC2%2F9m3RL%2Fid%2F%2BmO81m3f%2BLHTDwA7z2c%2BBdwoLqLKt4%2BIV2A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e6eed5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21252,"size_decoded":22281,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3ce4c4f25de0f156bf9f46382fb42740","sha1":"e51b427cc8f9374a073b6ce69d893b2f55dd1095","sha256":"169a42e373560b90478e9b8777e30e7d67c6b1eb918c70135363e89b4e25e804","sha512":"ba9c375f7bdb0e8d5a70ac92741777eee60953c524c37795291cbac24ee92e7f6e566668d7ecac844f3af19fe3b1bebd7844431adec45e122b8f334067805cbb","ssdeep":"384:WTCGLDPdXdk8DNiLQZH8PLaoe+mbXxA6TVYYV3MrwHG786Pl7Qp5lLXW2BnWG:sCGtXdtHtu3iLxA6TVYpMHOuzUIWG","tlshash":"9492e1d7dbfdca52a57c08a184f5aa67bfe97a05219580da83f762c82f310c7c4ca416","first_seen":"2026-01-03T05:05:42.461026Z","last_seen":"2026-07-17T09:16:39.678379Z","times_seen":4,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/garden-party.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.994Z","timestamp":1784279778994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/garden-party.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/garden-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys26tcg6q4k\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORVPbGy29Bh36uhMJ8%2B3ro745hZNMRwJRLJLBHCFBfJVygYDWIL5raGHdrYaMb5InFbVH6DZaQVpKUo1KarQ7MpNTrvY9bteOktdVj63uA966GJyTMsN%2B1XQGPXuxEI1kA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aab9225695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33860,"size_decoded":34868,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"5d5aac3c1bd9446e50ff37b49a6f8e7f","sha1":"ff7bd2d28dd5f2439ee7c826ca1a02bb29e24f35","sha256":"d8cd82aedcd677962d29960e6e451614d8462069d1840342baa305cd0fdaf7e4","sha512":"c6d247a28a734aad5d4908f99c49121eeb55103f80ceafe59f693b66e8072dfc1f455ebb00ce2f802d648d7f26637dd78e3ea6e591a0a29350cfca3c7fa36069","ssdeep":"768:yCArzkVL4TBIAEyq5gLP2vnsFIjS+tzk3lJKFJufUq:yZwM6yqW+iInGlo5q","tlshash":"25e2e18856ec88f5564f643272978b7df7a0a907a256cf52a2d00f2cb70717fd948734","first_seen":"2026-07-08T14:48:57.6879Z","last_seen":"2026-07-17T09:16:39.679658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/wild-circus.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.951Z","timestamp":1784279785951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/wild-circus.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/wild-circus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys6mdgvgh4i\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXM4qwX4CGJDUH7%2FufOltM0eg699J7NNtF3uEC00UqDW704AWG9n24Z9cvMVo4gxw5apH%2B6kzGopIGQ0E8AjhS3CklCmYSLaqbpK7fnS9kIxZezWjx85UbcZohw5ruPZUQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d63add5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22194,"size_decoded":23203,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f9a83fce9bd781b566f980adb9be4493","sha1":"9e7f142bd9b969f49ca2c5ff79eef30d07aaa9c8","sha256":"269d04ac4442e61c53ae887dcd6ddbc3d4331cc755058b60525de5ab7e2b0d7b","sha512":"10a230f901f3c7854f00c7db9372854ac08c0008e944471b07bb1092d171bff1e85bc6a19a7bd5d6a110d769666ec6164e91b825167f0cae2d464f75d74c3404","ssdeep":"384:C5CHqQ2wMv+uLUbEPntyaB8IXXrrKi31tljunK9tORhp3r5ku/1uK5y7B:1KQ56vtFW07rd3UK9W3r5d1jOB","tlshash":"1da2e14f802acf74fb0fbb3ae279467c205df98d27e613875742f5a60e065912176b28","first_seen":"2026-05-18T23:51:30.844387Z","last_seen":"2026-07-17T09:16:39.681162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-9.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.253Z","timestamp":1784279764253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg16g\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIjgDxyJbWf%2BW5wXchmmX8r7hEzmCaz60NUfBFn%2BBl3pwNqN9dMdmVdELACYflmymJoV0dSq%2FlXGS1zMt%2BGtRW%2F0mf57ejaPxt8c%2Bvgu4oE2LqQYtBLig1vMdBGZxzlETw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e9d1d5695-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cea93b9ee026b6bd8ba64aaa2c6070e5","sha1":"99b1130a2cf548f9515ea63012f794a3c7bcf27f","sha256":"8e1c02232782eaf8554f37cc00be1bf67a7addefc7bae2b84de67ed69554cee3","sha512":"62cebb34244fb908f007f09f1b94fb20b59c8c79db3a4ca0d7c7ac41fbfd72b5f5ee5d63e890a22ac2d5c23d972a8f4b55485eee9a35d008d468f3c6183390eb","ssdeep":"","tlshash":"6e3166e582d5e2c19059bbe8ce39feb139463c775e73c726c1a62a717a40058cc0e8a1","first_seen":"2025-10-09T01:23:42.835866Z","last_seen":"2026-07-17T09:16:39.682599Z","times_seen":11,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winning/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.640Z","timestamp":1784279785640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 31\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":31,"data":"{\"exclude\":[],\"locale\":\"no-NO\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:25 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkPVWfLdwmisgidrmLxXGCSwq3SbRkQ5ToA8%2BY0b1U3Dt34KeJNfWOUntK6PSTnhJnUOeqTfzTgi1440y3UzTuAvK214UdDOPRfmM7nMn9y5Tf%2BKeP%2BB2htsPXTZHmxNYg%3D%3D\"}]}\r\ncf-ray: a1c825d44ac25695-OSL\r\ncontent-length: 634\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8528,"size_decoded":1617,"mime_type":"application/json","magic":"JSON text data","md5":"34f5c8ec16cdfcbf7216469d73e2b501","sha1":"68e0ca7d1932d3dc144ddbfc837f0effddb16137","sha256":"5671768d6049fa5b8ebedb9c5c1ad31c7f8103ef495483ee3b002ac780687bf2","sha512":"7290ca4aff8211b1a07025d6814cd47336e61f68e529003bf5ae924e53e09719adc4b5502c81f8889bac75f35f6ab2f93c294f53a4a12d2af11ed94a0021732d","ssdeep":"96:7fcfiefKfinfj4fi1fAfiFiOfYfiKfPfiiLfjfiFfMnfitfMKDfi5vE3fYfi8fMb:8ko2ch","tlshash":"24028e566962d73b76e360e0ccb3efcd1059dea5a42c8438bcbf19a2d3228146ec571d","first_seen":"2026-07-17T09:16:39.683809Z","last_seen":"2026-07-17T09:16:39.683809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/haunted-house.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.953Z","timestamp":1784279785953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/haunted-house.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/haunted-house.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys2l3qtdpjj\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csBZmXJNUNpAIkO35bn0Lalocmdwbby6l25jy9WA2w71PbNi3qC%2FYXBhJjXCly1Ic2sAQl8O%2BquEusgOvu5xa8tYe95PG8xuyCEBK7iCnH9wnPqt8%2BqxM5Cllu0%2B%2BZm7QQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d63ae05695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33103,"size_decoded":34118,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"582ec26e6452b4d1db2cfc6e70ab14c2","sha1":"1a26da1c42a5290c459d1e963b2a7ec19d28d5ca","sha256":"af05351b01318d23dbfe9854cb379dce412230eede295637b8c916b3b4f762c7","sha512":"3dfc0670448176df30275539ff6f6254cbb7f78b486dfb6a98de5ac19abce1df3fc23e41f810d0fdfb8e5acecb1b6134de77f8338a4b968b4b76fc8dbfbc95e3","ssdeep":"768:AGBLTn8I1/gNRvU97Pp/3P9tlRcLPY1rJkX2Lwnp0xLxs:A6Tn0jq7PprALQpJkX2Lc4La","tlshash":"0fe2f1851f6d8723ee0d617583146110abc68a297cf2bfe7c5c436e857332817f866ad","first_seen":"2026-02-01T01:43:13.97375Z","last_seen":"2026-07-17T09:16:39.685159Z","times_seen":4,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/undergrad.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.195Z","timestamp":1784279764195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/undergrad.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/undergrad.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrqvkz0b7g7\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cewxemUGB%2FBu3KjsKuQSPLgH%2FRh2MxxGntcUm7n2NxMiTQMCNvX0FqQwqSj9cXaWzHtP3Fea62aihpoFgYyK7kv34zRk6Dr%2F3Sdzb%2FK0jJ8wDayZFCyC5RCBBFjlyePb1A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e3cf05695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9655,"size_decoded":10666,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"62e6ce7da5672eda46d2e96404ae1332","sha1":"d255d60719f8a5222b3b0442474b6ec94b07bf5e","sha256":"447a289b5593b723fbaa0db0c484b18f176b259f74722cf1a73642ba1b365d47","sha512":"fd396355762d2d48cb51ecfbb0882ff2ed3e27a983ac9c807dac25934cb7292a1bf6cbe21d3af59986677683e89806e75213652bd39079ed7e5d81fa4a421679","ssdeep":"192:t9QCL4i+Zm/eaWeFlKG/rLpI/bcq4S748dVV948ZNz0kgAmOC3vs:c6+Zm/ePSlKGzLe/bF4U48Hwil0dOC3U","tlshash":"3612bff12364c51ddc2e0d3998ad0b969acf5e2cb4d017452cf7b88d5f3c1435ae8146","first_seen":"2026-07-17T09:16:39.686893Z","last_seen":"2026-07-17T09:16:40.190576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/blackjack-classic-17.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.228Z","timestamp":1784279764228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-17.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/blackjack-classic-17.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrwav3ckezz\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Aoku6TNctIA6r3x6Q0M3IhMaFkpyW2tcc4HqwirDwyHfimVJCkxRbs1Yc2r2BqB9psJAPV3sktOTgoXL4mN%2F5tEEx%2BvJS146Ye3ZtnTb3Ja2u%2FonOJgYXqfk80jjsL%2FhA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d085695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20459,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-18T03:24:45.56322Z","times_seen":42,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-15.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.262Z","timestamp":1784279764262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh916j\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6KfIHjg89BrXQwClW8YOifGk5Xh95sD0L5rtFeFOyOX9k7QY0PBUi2rksQRSkSEIR5gTCuEW%2BEDP7%2BwzY8o2ygxgyEbiof4sof5sudGKlWBFaAlaSUmq7INjjkq2pwbfA%3D%3D\"}]}\r\ncf-ray: a1c8254ead245695-OSL\r\ncontent-length: 763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22c79314b048823211f300e3c106063d","sha1":"e3a24955ed0a142ac537cf73bc07953a85870195","sha256":"c635580087cbd2d76b1d604fee4705a7ee9e5a9f02662840b479b4f93a8c2ac9","sha512":"75a16bd28b4a0d16411f29fe0254014f670c371f9117f47dfcb686a35b0071e682a3ba5197e832e2e83fda706599558c3f03c4b5e01dea89f3a66f8249deffdf","ssdeep":"","tlshash":"823177f42bc5d9d0da01c770891690b4296e38ffbeb5dbc8c2a148e0ee600bd0e1e880","first_seen":"2025-10-09T01:23:42.741528Z","last_seen":"2026-07-17T09:16:39.688826Z","times_seen":11,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:28.693Z","timestamp":1784279788693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:28 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaoGnjVXQdujS4GMSo%2F7N%2BGLofNaeQQwN2DVZeY7SWbKIKx3mH%2F0g%2BGGW31mn3IrTrvsJobh1A3ws9Ds1IqsrcjEewAjbpjtXgC%2BcyavWKVa2Fm7A35YHla43GRrGoc1ng%3D%3D\"}]}\r\ncf-ray: a1c825e75bda5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":1032,"mime_type":"application/json","magic":"JSON text data","md5":"8d438470520234e25c2923301042b66a","sha1":"4b1c9113dcce1898c5b0e20532750a9f8cee4108","sha256":"211e198102fe06f084511187e10458047591ba1d04b62ce44064b71bcef01b07","sha512":"d13ce6e16b1c973cd88f53d3f185c4d8b4c19a9e8b34c298814806f67aed45f3d26c0a4fe7fdf8131e584f608babf0bcb92e5a86ba46d4c5ef696be1ef24a240","ssdeep":"","tlshash":"67a024cd40c04c0d5373050034cf35c414110d0300d0155413555cc304541050033d34","first_seen":"2026-07-17T09:16:39.689443Z","last_seen":"2026-07-17T09:16:39.689443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/samba-de-frutas.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.224Z","timestamp":1784279764224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/samba-de-frutas.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/samba-de-frutas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys58d2lagnn\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FG2hiC1C00TvGVdUO44Y3SlQ4xyj%2F601B6sUtYJRhak8o%2FP9QG3KKYDBIDey26DaWZE3yAejNnj8kDQdxfTHppyykLmyAuwtP9KMjqxfuFBOu1uuW9DZxTJU%2BlNo8S0cg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d045695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21587,"size_decoded":22602,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"58e6576af77ac63bae3c24a9edc1105c","sha1":"7b88dd32b226155067205dd591172a10388f0c87","sha256":"3821cfebf2de91318a8ee97737f52b3521c0d65b46e5f9840ffb07ed8730f32c","sha512":"60004510b0b51afbe6a7e347603938ef9f4cdfdc7e937d614fe84e4e8465d8663592284272481d3c4c5772cc8343094229b396f1793e455ac2bbc4fd55a7587a","ssdeep":"384:1pKE0ICrtLCWKb6PIEKzIh7QSIzTIHIuOLHmTN69EPcIAdOWbpr:SExCrteW4HHzA7MTTuOKTN6tNl","tlshash":"69a2e049bca28ec0ee7c92690185fc42db04846d376bf79e884271dd433ce179a9c7b2","first_seen":"2025-11-25T22:34:39.210127Z","last_seen":"2026-07-17T09:16:39.690603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-17.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.265Z","timestamp":1784279764265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh92dg\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meWO4dNH%2BLW5%2BV%2FVTGNQbs2VTFLJi0cxgmeMcItJw92d%2FKFrQvRE21ok%2FczrUkG6bjr%2BbXF3jCrMSlPQQ8FzmUsvIv3zb4GAeW1cvYoDz6J6mSpYvBJQBqt9a60yZ%2BwRng%3D%3D\"}]}\r\ncf-ray: a1c8254ead275695-OSL\r\ncontent-length: 1358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3076,"size_decoded":2394,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a1e8666f84f9f46296a198f73da9c19","sha1":"9f0f6d70e69f47c8011f26bd7e437d49972c6f5b","sha256":"e084a117e914e8ef91b24ca3423b25dd474471057d355a1d015332fd3c9e96cf","sha512":"e9a2fe372788228f6c7ee5d30837afd16abf9b4217e629621a819a9a251bafcda322933afd95d12ac436ebd9bd1f0da5cabf760efc80a7f1f34be5c17e3ae5eb","ssdeep":"","tlshash":"005166f2a3dea1e1da4bdb90e8166932be2b3cba7b6acb0dc170df846151014c44cc94","first_seen":"2025-10-09T01:23:42.813539Z","last_seen":"2026-07-17T09:16:39.69196Z","times_seen":11,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/artic-adventure-hd.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.221Z","timestamp":1784279764221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/artic-adventure-hd.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/artic-adventure-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrug6kb0vtv\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoAFOph0NZ7npnvn%2Beo2j%2BpkHaCEuOKJ6DK8R6o9rsDDZc8NdlmykcG%2BwpHOHDcRdwvSS7CC9nJvlYhS6qNgxuvwhORLFI34gmcHKPfeKUUvbbbSimY7%2Fz6%2B4p8%2FvaUdBQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e6d025695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41251,"size_decoded":42273,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1ef3c1f79ff9e0a8d740750d83d69d03","sha1":"f9a5ae732de4b63494d120b2e4f7ee2d3540a352","sha256":"e4c892d3da3d6ecdb28b6b6bb436206b6be03d2f75febc9e33a016d641b2b4a3","sha512":"b2108f16f01df103fad01a5c82e942937f9c49e3a133f2f84e035c0939e067071dda4d6c2783718477a457776dc3a81a0eeeba524da7208293084626ea7ab278","ssdeep":"768:6qsi4c8oAPkr2WoXPBWrsWiUz1xa6a/J0vkcLg/6Ze9Hp3JURyW0TywyHiC:6Ti4c8fooXoviUy6aR0MKsikHp3JURAE","tlshash":"2603022ddcd12406d73fc137a14f3ea7b2e6ed7e5e528b17762908c0a720ad64d406a7","first_seen":"2025-11-09T11:22:30.362585Z","last_seen":"2026-07-17T09:16:39.692621Z","times_seen":2,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/honey-honey-honey.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.908Z","timestamp":1784279771908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/honey-honey-honey.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/honey-honey-honey.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys2pv7lrml6\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggLK3l1MfrV1WpE131OhP%2FHJGnMMVeJdp9bv9XwKob2HtdKS1uC5W7Dm1Dhvs4C%2Fz%2B0DHrpVbcCi8BuP3yU1LoHv3sGt70K0BdR7tZIHlVfxhQfkE5Wb8bAbmsGRsHgVbw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e6eee5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29274,"size_decoded":30289,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8016859d585a8640314988aa6c0fb4c2","sha1":"8723d5e00719f5bef1f232e909d175364eea3a94","sha256":"8e6a198271b8966df74268cd0bf8c9d4978226896aaa73032e6b0f435a706dd2","sha512":"3d0f2b2ef5edfdfea9ce37ccaa97c19cd3b9128c9c95b146b87224a16af586b640598d7cca62a29efdea684983f71af911e342c55967a9f41e169d4a09cbd577","ssdeep":"768:qWSlNTSfYlmC04R6/FzhWAYgYJHz3HSRLYx7xud4BG2W:q3efY1R6/vWAYgMHjHQYx7xu8G2W","tlshash":"78d2f1243c75e924cceb327bfd94b45355beb92053b2400b2797dea86b0ad449f4e84b","first_seen":"2026-06-14T01:02:41.568322Z","last_seen":"2026-07-17T09:16:39.694152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/wild-safari.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.222Z","timestamp":1784279764222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/wild-safari.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/wild-safari.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys6or79npcj\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPS9SYDs%2BNz%2FLcXt7FZR30R%2Fq9HmIlZ4NtBDhfPBXXNcqoV5cH%2BHnAgeQi79rxzkd3Pd1F5iUy7psQB3tskL6DmJvDSz0Ygp8i%2BgDQyR8BtNHu9PKE5iPXEZf05R4H7pnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8254e6d035695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32851,"size_decoded":33864,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b65dc01f95f6192871fb23df2e0cc36b","sha1":"05975779f06e389e6915e6b63c7d1816ece6ffb4","sha256":"720e9f0c7c57b46cd54c0744a6bd368e07e4d43633310b0d106c2fbcf8838ef8","sha512":"f18251a0c61c3edf05a13c857adf15e84774aaf45fa10feaade884160aceaa3b46681f7476fee44bee7f125c5dfd4be474799164b90ba93ab6ba6ea15c8a659e","ssdeep":"768:NCZm9ZV/oLzSxvFNCW9pn+5u8g1zvyjIo2:6mvASxtYe8a2Io2","tlshash":"2ae2f1c26ca8f335c978397344f0ac9b2e145a1636243b83758513a9677267b264a39e","first_seen":"2026-07-08T11:55:56.152654Z","last_seen":"2026-07-17T09:16:39.695747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-4.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.246Z","timestamp":1784279764246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh919d\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsWU4Pc54HoXcygKRrLR%2B9FnKhe7Da7HTNAM%2FjiqFTFJkrKCnqbxeveH5xmniB9XUz0S3p9OS%2BwbjG7HTU1jEpceq8J9ElnZ%2FXez34vfc7pskyusDUPzoVkadn%2BDAjbC1w%3D%3D\"}]}\r\ncf-ray: a1c8254e8d185695-OSL\r\ncontent-length: 761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1633,"size_decoded":1791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f05175ab8e97d54bdb51946284f29f3b","sha1":"fad3239e64a389900bd63b9646f8794339082b75","sha256":"cb1365926531ea81b8e0a22a44a34749deda1cb1642394a441b9b48acb8e72d9","sha512":"26b023d1a5fa4fc91bba9cb0404d2f33fc78960acaf2968d7168e267c2079c429ceb099312127674ecfa6eca87afd2675ba51a80863687cb44b62cc92e2a1f93","ssdeep":"","tlshash":"803111f563cca2f0cb87e771d82f10b37f7220b9574deb5a63d81dc1a62606d8189980","first_seen":"2025-10-09T01:23:42.756212Z","last_seen":"2026-07-17T09:16:39.696994Z","times_seen":11,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/banner-popup-69fcf3844b6336.23508076.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:10.591Z","timestamp":1784279770591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/banner-popup-69fcf3844b6336.23508076.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/banner-popup-69fcf3844b6336.23508076.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:10 GMT\r\netag: \"dez1t2muthj42wlc\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7IkfAiw3lnWBTecKigjtlnE62pyaYJTz0MGfD5atujaXixXJkjOIjfhKgsJgHwvkgDP9RV4lPayMgMiLb7f%2Bs5LJEGYDJc0KbwSXGL1HalAWEaQRKNg1%2BvHRsjAVIKlaA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c825763e735695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135552,"size_decoded":136614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x342, components 3","md5":"e7709060435fa9662ef58641a15c8433","sha1":"c302d58078c2cd96c91d0439586e09d29596b406","sha256":"fa010e6e609cf2008d9e91ed864c9dc654d9431ffa2c250c0b8154d54daf0a4a","sha512":"73e6b09beb9fa341b3e297ab8835bd86e08ffb75e7d299182df1d5bf3e4a919280e1ddc2fbd7843e5cc4ea47449e13a2aaa6edf4cd3b149d32ab58bf0a59ffdf","ssdeep":"3072:Ft4ptcOZkjgG+ggfd0b7MQbKBiGvcGU6fEMxn:Ft4LM+ggF0Mlcqffxn","tlshash":"1bd31209afe87a41c52c0165216ffba4e3fcd183a185977d40cee8c7dd2a19dbac5c91","first_seen":"2026-07-16T11:27:37.604365Z","last_seen":"2026-07-17T09:16:39.710941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/jungle-wild.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.989Z","timestamp":1784279778989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/jungle-wild.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/jungle-wild.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys3bat5jqc4\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QQZi%2BSBb2olvBleFmElEXckT6r2bQidpZXXgwaDMKOvBn3RvWhZKjuXz%2FiopyZSS%2F1ttLUd%2BYC7k13zn0Ldv97RMmrrbvHo7wI9vTIkx%2BKciFL%2FPxjbfv8WnR%2Fveohzdw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91f5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34132,"size_decoded":35149,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"019ea2f4ac4a078b244fa15ef891586d","sha1":"70462eea232fe5e08239cdb6d5bc0473e385fb94","sha256":"2b369646069c2ccf32c0f36a4976ff1a14533e7e2bd38dddbb81273380824c45","sha512":"1d2de3b2997b4ccba215b22ac4584f8cc74f39eb10eafe025c9690b0b87ee24b61396af4b2d5efaf321f3f2d39043d8cde9e886666e8d9eb6921a3380a91ff0d","ssdeep":"768:tvpT+FutURKheE+4qmN6fdNkul7q8k7riqSwC35z0A5do+OdX:tvpTxU6dqA6Avb7riqa3P5GJdX","tlshash":"9ce2f10d411e56212bfe98355c5f807a1a0ce4ee182ca15fbb7723a8cff9409e3527b6","first_seen":"2026-06-28T15:18:42.608834Z","last_seen":"2026-07-18T03:24:45.578811Z","times_seen":3,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/dolphins-pearl-deluxe.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.213Z","timestamp":1784279764213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/dolphins-pearl-deluxe.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/dolphins-pearl-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys1gma3zhbp\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57lb3Ipfgc3YtOnVVw5eoJ8%2BbsFJWIDluLYNATnzkbsUBep8IhFQ0WvbX06cFiyhzIJAtjovYsixmifVnEcE27QEzzrafoWico1mmmZ%2FqVt%2Fmn5QaIddXWZWy%2BJOsslHQA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e5cfd5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22453,"size_decoded":23474,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"0bddc7c22badd5cbd2b5d5ca052942a0","sha1":"e36da2da36af81f7cfbfcfa239b04076bc1e2ee4","sha256":"37c06075de27d38da4e6e4d67c67530b7f06870bddcd2abd8482754f7297fac5","sha512":"22d7c33bc4dbf365b81beb3f4ace8b29dd81d7e778907f7227e25a2a8aa87d7e0207938aca74ac34b5ca9d0da381e2659b3a5233e588bfc9557b967943a51c69","ssdeep":"384:twvbYCOIW5zH7gKeKWNKrFHZhe6jGrCjFIlycDMrPgEehyDzP5LVW:tUOIWMKWMr7he6ECjFIlyUQehgj5BW","tlshash":"14a2e17ef56b3404e10e6fa945980b73eedcd85431d326a772966b8e27bdc7028048e9","first_seen":"2026-07-17T09:16:39.715726Z","last_seen":"2026-07-17T09:16:39.715726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-5.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.247Z","timestamp":1784279764247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5r4BTAUVRFYJ4y2toATm8Pon5uvb%2F0eCre%2FeFjdjBWe2iC8ufQtbkftu54fQfeEe6Wzzz162ScTdzv7Qiva3FHQZmnmFW430f8Y0YmVWtWkfv48MDcl8SeCeghAfUyH%2BA%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicpyw6axxh9db\"\r\ncf-ray: a1c8254e8d195695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-17T09:16:40.271735Z","times_seen":57,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/4.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.269Z","timestamp":1784279764269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaafIlpiVd8vOjmlyyJ77AU3sygx%2FAYtrgwDpKGLv9dw19AqIFyhqC0kRLUtTZmgl%2BOyou5dS3JfZoTapyTt7bfkrwA6d3If%2BbrBvbqKD3Q57BKqWJEEL77OomdOSlNDPQ%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicpyw6axxh9db\"\r\ncf-ray: a1c8254ead2a5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1269,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-17T09:16:40.271735Z","times_seen":57,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/8-bit-intruders.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.924Z","timestamp":1784279771924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/8-bit-intruders.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/8-bit-intruders.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpyrr53wl3nqc\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mpbrqx6dtvUJQyvkMpc8mVLG%2FbY5P4cmVY9JlTqc5fL0jV35tr%2BOqKdoF8UF4t7AgnI9kAe0JDYCwYYu47MZ0JL6KJAxxhCFqidFkNVZ1G10mx5AOsSEQNINv5mse11Siw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef55695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30756,"size_decoded":31767,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0dae2983f66c6c4aaefee91db35e6bd2","sha1":"0529f96f568f47c53411fda3f65eac213f8c7c9b","sha256":"660c481b59bf1c744d330cf855eba5ae769c2abba635c4c328b65d31c5b91ddd","sha512":"0df84283e082792d26c2d4fd6c3b6072772350e4823303627bb6b0faf9561a8ff5c3df4377a6ae6f7a0e1932efdae0be9c54aa0d3019bdbdd7928558ca73e7b5","ssdeep":"768:q34MmSfSd07RQXWHQMUFbV0UZyOhttPvW6L5+UL2:q398yYW6h2","tlshash":"3cd2e178074ad73af57f793a21c74389a7137105c19e1b0e419f162313ea532d8e6e66","first_seen":"2026-05-04T13:03:59.003398Z","last_seen":"2026-07-17T09:16:39.719306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winner/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.643Z","timestamp":1784279778643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: no-NO\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"391\",\"862\",\"764\",\"527\",\"518\",\"819\",\"417\",\"472\",\"319\",\"162\",\"526\",\"635\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:18 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ColHynFTpWdBa%2BFISo2BkU4c79WFMNNm%2FlF7rDQxupXTkhiqaSR7yMOi8Z2s2B4bemmLV9G1NVCiEE5mASIXYUUCZw1bDfsO4bd9eZLTYSQLILHY5F2Crj3ZAoA%2FFBLp%2FQ%3D%3D\"}]}\r\ncf-ray: a1c825a889045695-OSL\r\ncontent-length: 209\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":551,"size_decoded":1194,"mime_type":"application/json","magic":"JSON text data","md5":"6cae1dd125a0ca0e318a6cc94f4833df","sha1":"9a6f824f2b73855f4123dde9008eb6067a883c08","sha256":"8725ad17a2af5b02c03f62cf8ad4341c7411100762b2e499b532fcd83c71500f","sha512":"0d175b1d935ad5e92404ac4725618d4e2ce7c6bdc71a948940dde2dd78c843aab8e670833652bb0743dccfc5e1724e3a6f5b365e82a3da37b80d31bc905f11d2","ssdeep":"","tlshash":"16f082575b11973b65c710d0dc77efcd1004e952556d8434fe7f0992c3328201f8860c","first_seen":"2026-07-17T09:16:39.722041Z","last_seen":"2026-07-17T09:16:39.722041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/at-the-copa.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.947Z","timestamp":1784279785947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/at-the-copa.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/at-the-copa.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrug6kb0qny\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeCKGIXwB5MXulrreVwuF01x2r5sG6aaGE6RfkmyZ0gogf86SKT%2FUCwPo%2FsuCdOFhlqwjXSIHPB4%2BgFxFkKJFZe8P8X0jFodgYwI3L3Et%2FGtECiHKvX4Cs92N1%2FXSNIlhA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d62ada5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34558,"size_decoded":35571,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"462bbad037c6056a58d9ff766086e538","sha1":"db2f9cec21254aac113f4c09fa0102dcff25446f","sha256":"ae087caba63641df776e7b1ac6c4a35d1a7357ee79012c76a454aff8bf2cf1a3","sha512":"1ac0e009729b32b3c2ec1e47ea9bd59f88c377da79ce20be0cc0fb36ff815f42d7118f499ea4ee6f46755f596b3684b31b716b6f7e9a05647c112ded43cf2f51","ssdeep":"768:a+zunD+c1ZimLQB9djRf0UtefAWljBrYhD1:a+fQZimLQbdjRf0NljB8hD1","tlshash":"d3f2f137c77f232cc56f6b4648a485fd3b1e9e2baa78c90015629f5a12644b252e0d8f","first_seen":"2026-01-01T08:17:55.570313Z","last_seen":"2026-07-17T09:16:39.723926Z","times_seen":4,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/blackjack-classic-44.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.949Z","timestamp":1784279785949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-44.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/blackjack-classic-44.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrwd8tqrezz\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BWrwXQR83EL9Uu7cyRqG%2FyXSaDYC19whplQOtHQUh08pNeDWwNzDIa2cH4UY4EYowfOueRa40sLrx2sVk8HgJTkH2A3xKZqUrDAxZ3PZqNFApkGyCWI8ynbxlVjOgNhGg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d62adb5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20455,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-18T03:24:45.56322Z","times_seen":42,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/red-combat.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.205Z","timestamp":1784279764205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/red-combat.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/red-combat.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrq7rn2c5cq\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7AfCZvVm7RMGhdLuLzAA0Su5q6VP62P8t71PcOnNk7uUekDWmAVKI69ZEF0Lb71aosL4QYvmbywiFqS8F0e4hGVUKkkqUleZuJzWMYewzNbrF6Kq1pYBK4Hf1Che2dPxg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e4cf65695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6938,"size_decoded":7942,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a52d41776f347d71b7a209afb0fa2afb","sha1":"758a0034226566738dc686c681ee9a56416e41db","sha256":"b8cbc32fa20de7ca09b51505283fbc5904d4f8371b014aa6f8a0e69a5f250550","sha512":"2b7b1fdd0f0739110443f875c8fbd24e75f3c07939a59f2503cf0bb571541a557849f48a63b0da7d3a2e099098210e7f1a20e50f0ca3e58744fa3fd4761761a6","ssdeep":"192:6l3LX10fvcp/StDkiSwCGmM9yicGNTkvy4MN:6l3T1t6tSjGsilNgvyLN","tlshash":"a4e17da3eb6654cbff2fa9381770225253055a1135d03f6f18843b9d272d4df2861990","first_seen":"2026-05-02T01:21:41.023869Z","last_seen":"2026-07-17T09:16:39.725699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/highway-to-hell.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.219Z","timestamp":1784279764219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/highway-to-hell.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/highway-to-hell.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys2nhh7kn9p\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lsxTLPt5af1i6KAtwcw1ZV2JdPliwjuZmL%2BHM4il8IAVgBh2wBVOeQstrqlV3r3I94gqS20%2BhC%2BUjYS01MsZqqgi6rTgvHZr84WSTn1WMaLnxyYi1OzZDQmHBe8fghhGUw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e5d015695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30157,"size_decoded":31170,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"35b00bd7e698d637e79e479b6aa85956","sha1":"bbc1c2114896a264a1256819f4e96a3660ad119d","sha256":"57e9478cd2faef73bbc88b76a9c66a843a844a899d629dcdfbc7a73d84967731","sha512":"8056c8d01f4a253a4753bde50bc4b43ab32e92a5c71ba586a192de2dff4c02ca22b8d00b3e178d6f6312029f191a9ddb22fef16dae8f6f62dab182d1323ab9c3","ssdeep":"768:paoA+5Ki7GId2TC2iphnsUX3U5rOAYzYjIB2b6lHxjFxkBU:p1AMqIgT2sRCAYsG2WzRT","tlshash":"9fd2f1ee8110b323fabea7d81525a447471866ee49330b3e9895afd467162cdc27bc13","first_seen":"2026-07-17T09:16:39.727522Z","last_seen":"2026-07-17T09:16:39.727522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winning/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.589Z","timestamp":1784279771589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 31\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":31,"data":"{\"exclude\":[],\"locale\":\"no-NO\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:11 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMR2KXME3TAJ%2BfHInW3ZM6wQtJfVwncx4clx5PPAD0%2BujrQ8ZNqIyq9G37jgWVEWAcvSOiES9MERJCTu8gv5t%2FzUMXD1sSurbzsUY4wfOxakeObk3g83xZTvLwBIc7TwGw%3D%3D\"}]}\r\ncf-ray: a1c8257c7ed75695-OSL\r\ncontent-length: 602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8420,"size_decoded":1585,"mime_type":"application/json","magic":"JSON text data","md5":"5c2ee0a6eed4a77664a75e9bf24792c4","sha1":"b227c741f8273800cb13d05eaf28e64e70abbab6","sha256":"6df82b6c8a28c25a96573a8ef34fbecfb3bff325e4e5ab6479782b419e80d75d","sha512":"52fe39da8d8f5dd440bacdc64e6058bba7cb5ae59bd907c1c0a1edbf4791887dadb37748a6bca8a3233dd3dbe11e7272eb3b7a9bb39221c8f6e95c24d509db30","ssdeep":"96:1fTfiVfjrfiEfjfiFfVcfiKf6rfiP+ftfiCfyfikfNfiWfnfidf6fiqfn3filfMZ:g","tlshash":"23029e5a59a2d73bb6a360e0ccb3efcd1059dd75a42c8438bcbf19a2d3228146ec571d","first_seen":"2026-07-17T09:16:39.7291Z","last_seen":"2026-07-17T09:16:39.7291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winning/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.638Z","timestamp":1784279778638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 31\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":31,"data":"{\"exclude\":[],\"locale\":\"no-NO\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:18 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEDFy2A%2B6Sj5dNXUE9%2Fi7CNqSt3bnpMxUG5j%2FsUs8qmHmIt3C7cHC%2F7EQLfRczlR6iJmP2ZAk9%2BCe9NCunB6gBx01BWdA272C8ur70YuzsTyLzEr3bwlqH7lVKHH6k7JaQ%3D%3D\"}]}\r\ncf-ray: a1c825a879035695-OSL\r\ncontent-length: 628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8461,"size_decoded":1615,"mime_type":"application/json","magic":"JSON text data","md5":"f7e386848bb0456ad38d8e0fee22acd4","sha1":"273ba0e046d96250661ba18bab632eb86d8c7a42","sha256":"9f4550f019fa45c7f405469e0ed262ed8da122bce9a94e9414d21c1e2d464830","sha512":"dae3fb9e4827b531d726f2a731c51f7b6edeb22ac6ab34b561ca785dfd917ae719befcf1a76d38fe34e93cd893dcad8207704355c62a8ca1a60eab19df9f499f","ssdeep":"96:ffPfi/fXfiifyfiEMf+fiifQfiFfYyfimnYfbfinTfOfiRfQfiSfwfiaf0fiefU3:Kk","tlshash":"a402ae5a59a2d73b76d360e0cc73efce1055dda5642c8438bcbf19a2d3228146ec571d","first_seen":"2026-07-17T09:16:39.730719Z","last_seen":"2026-07-17T09:16:39.730719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/winner/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.647Z","timestamp":1784279785647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: no-NO\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"656\",\"391\",\"862\",\"764\",\"527\",\"518\",\"819\",\"417\",\"472\",\"319\",\"162\",\"526\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:25 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pa5%2BRny8kak1Mgn49olPXcPmtcNHf3cEVovxkA%2FFxK1tgatW9gK9FDXA5uxKB80uWpRTjfkRtq%2BcZ5SunHN0R1GoWwgjEW4%2FnqpKGTOzXNOJRG3%2FkEMuH%2FifHmnQpsGs%2FQ%3D%3D\"}]}\r\ncf-ray: a1c825d44ac35695-OSL\r\ncontent-length: 206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":549,"size_decoded":1197,"mime_type":"application/json","magic":"JSON text data","md5":"cedb18a6bab46d61975af99b4cb756e0","sha1":"48ec278fd0aedc4e3d8a054d9a753647f1eedbad","sha256":"64cac38e1dbbeb5992e9899649d7f4bac6e167b0e086d2ff181bd996a245b9cf","sha512":"099105a4a1a6d7bc5819bbca27f8603d88e19abb0ed233957320b0193b5a76ef66b8e212a8785d269f3b7836e31fbe137edc0aacbe722b87f3d5036e57ddccec","ssdeep":"","tlshash":"cef08c1a2b11a33b658350d0dc77efcd1054e9a2556d8074bdbf19a2c3228201f88a0d","first_seen":"2026-07-17T09:16:39.732402Z","last_seen":"2026-07-17T09:16:39.732402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/pharaohs-tomb.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.928Z","timestamp":1784279771928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/pharaohs-tomb.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/pharaohs-tomb.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys4fs9uxrk2\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vctLzPXh9sHpkOi92pZKPyrZpznRXqoAE7QF%2FPA5sxThJzbpmzz7zeNsRiRP5jitH%2ByTxUygyPebnPxN4u6vLnlRyNQZgZc79%2FoViBukMuhDu%2FmqV41TiR3ahcx7%2BmA%2F3Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e8ef75695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35714,"size_decoded":36731,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"43a2b5143650e036b13bff6be1f31ac8","sha1":"81ed3c2b90b68a3f1abc315d255d86e502acf82f","sha256":"1e56bc995034aee14d2c639f251253b8972a7946d9cbcb960081cbbd5257e26e","sha512":"2f934c0310d4cfabdfd2e043b59dab4ff9b1598f779e73b16d31522daeebbd59960cbc221dca6a94a271662be36fdd322d5773755dcbd08f2a1543227f3a2237","ssdeep":"768:i7bfo5Yq0pVdnTegIjErilaeR9ldtwsdKBEvxXSnZ620I5K:i7c5VgVdTegIj+KaeR9fKevJE88A","tlshash":"27f2f189e70dc0a4dadd1c1d9a4a5e9ad1033801bdc6678f4d61b1a787ff6c063db434","first_seen":"2026-07-17T09:16:39.733734Z","last_seen":"2026-07-17T09:16:39.733734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/cleostro.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.207Z","timestamp":1784279764207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/cleostro.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/cleostro.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrkuv94b4km\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jmfd%2FmxBfLHQKRu%2BQuGFuqt44n5UyPoh%2BUy0j9IuIJ1ZE7rZKH0CeD%2BP3B09IOUy7QYyRoohrDjy%2B%2F06gIlDByIz4iLb7YDrLlkYaLFBql9U9sDVBe8DyJ6WA5Uv5akUMg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e4cf95695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5926,"size_decoded":6940,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fe9f7ee6ad62a6258a3ef37b1e542e3e","sha1":"0e7fb340663fde86df8d851643665168dc3f38eb","sha256":"60e0e4cd7b88d22e7336912bdbb79b602fa014a21e9efee061142a3779974f56","sha512":"01bbcf6f4f157d48d925fdc3ed4bc691a0ffece21433687b9313e4ed2459f5ac1d1735ebe3b4e3ef3b6e41211c38d5c2719faeb35aaca7cb377798dccfb7c543","ssdeep":"96:/+4l6lE+jleMRh86NSDui/XbDgV5yt6FXaopQGWPvg2y/8tG2U/i8Q++lJc0kQxV:/76lxJeMRdujjiOng//EqokQTT","tlshash":"fcc17c11a49228d9df7c867698d42a22f710bfd03bd07567689c696aeffb400d9bc224","first_seen":"2025-12-25T23:59:48.55421Z","last_seen":"2026-07-17T09:16:39.735293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-0.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.241Z","timestamp":1784279764241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh91be\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Btwy6QL4xWDYyiqV%2FBu2a%2FA6b1txQuZ9B6301dlf55eeLd0Xix1HCPdbI8ab%2BsmU9VOthFgguQawaanFUAHndl0W7Q83XJU%2B6J7lm1lVUEXp4Zj3pK5ewb97GJNkJviM2g%3D%3D\"}]}\r\ncf-ray: a1c8254e8d145695-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":1742,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-17T09:16:40.271159Z","times_seen":77,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/banner-jackpot-69fcf38441cfd5.06482457.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.603Z","timestamp":1784279764603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/banner-jackpot-69fcf38441cfd5.06482457.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/banner-jackpot-69fcf38441cfd5.06482457.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj450fm\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8oDi4KZzjdztvF9lhR9%2BlaRUK9QyXwQBNsTM7TyS78g2TMwnY6W%2BwUUnR2Q2rjZuRp9CUt92uwFP%2F%2BPP75WUPkfnD7JkMKbRI69096eyChVD0pIvSTQH%2FqDz5LyO509sw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550cd5f5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233842,"size_decoded":234917,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"6e6bcd1211e8174bd28155bdda236400","sha1":"720f033071aad6e1fa6da4552b71eb9844bf5ff9","sha256":"cac568d4f4736a7a82237b3ef20e8579459df5731ea84a595c76ab110a5ade5c","sha512":"297218ae5e85f42015e64b8a55f6baf89b2c6bfe24a7e1d6289fd6b88d070f3f25ee2b2605a05b743ad6a5f42975c8f2e7d32e425fa446774900cdaf725f3106","ssdeep":"6144:9OblIB5Mf4gdJPHO34s8p8/aD9mqRp2l6+mUTAj:CcEhHEVzE9mk86+mqA","tlshash":"0d342243af242101eb776fae212ec62c149e062cdbd1dd39d7260df8c79351f658aa1e","first_seen":"2026-07-16T11:27:37.603365Z","last_seen":"2026-07-17T09:16:39.736753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/images/search_icon.0cb5d733.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.604Z","timestamp":1784279764604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/images/search_icon.0cb5d733.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/images/search_icon.0cb5d733.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicq1uxec62bgp\"\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rkq3mAGedWDvMSpyjISghIyfhj0RXDy9zquNRkyF3K%2Fkb4OLkL0y2Q065gN7K3aJ%2BA8j9tpCu%2BN2pg9P%2Fm4zsCi40jN8JHOPfrQ3rIPNEjnZCuWV493vhK9uAND21zXfmQ%3D%3D\"}]}\r\ncf-ray: a1c82550cd605695-OSL\r\ncontent-length: 285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601,"size_decoded":1332,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03a1aaf84e90c6589aba5ab91bdd95f2","sha1":"e92cc3fe50a958ea18f6092555d5951b8f21cf9a","sha256":"effac3793d3f6d997f32971c155f4788edaa5089e3b3cd249c574c37eab5f9cf","sha512":"6ce5d5501d30a69038cb66bd6c9b9999b94a09e48e5e58961d8edf5b91227ce1177dbfc668012b865b303c0e86a31ba71d3f8c23a8d7bd62955221ac58556ab9","ssdeep":"","tlshash":"caf0c89953454d1cb0165b24fe047a7c806f147abf8b1c958060e1bf9ea378edda69c8","first_seen":"2025-10-09T01:23:42.748799Z","last_seen":"2026-07-17T09:16:39.738466Z","times_seen":7,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:07.636Z","timestamp":1784279767636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:07 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URn6dSeUaLPJ310S%2Fr2dMBu4uRlOmWnBSQhKM82Iujk4iaM5D%2B7wMifuh1g3YffYDQTfYtCS7Rg7HAUrs7cLu1DYNOVzrvQMsavQQ9mPUfT0LlRLG29giQ1n9bnNWkj86Q%3D%3D\"}]}\r\ncf-ray: a1c82563be0b5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":1055,"mime_type":"application/json","magic":"JSON text data","md5":"0a494fb876f3d254d614db3014950a08","sha1":"0a69c554f70c77856bb56cfb16044b9c771cffb3","sha256":"5a92e65281cd5c5bc728ec16bd5e825ae2e24ec775aacd00a35af54fc11f1df7","sha512":"e5c118a860dee951f9fdba11cbfa72726ab94b3a2e957c7aa1c98f425d736a8646d439b9a7254465feeb3234d2c164ae7ee739c34fea7b359e62396084a28076","ssdeep":"","tlshash":"bab0929a852b0c8903322404c89f33e014510e0271a8692016c1ca820c5c60e4817958","first_seen":"2025-12-20T03:40:23.707959Z","last_seen":"2026-07-17T09:16:39.73917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/sakura-dragon.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.975Z","timestamp":1784279778975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/sakura-dragon.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/sakura-dragon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys55zc73mlu\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cFHG6ounaYYAev3nbwalcoo%2BiWuyWDONacIt%2Fh3fxiqwp9zxjBMU%2FSyMeeaprh4TBIKbutN%2FL4%2BLWcxvqkAQ%2FjUkOqhU1VB7ypbpu6lxf7FjTpu1U5Lcvj6FznVufRzXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c825aa99175695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29298,"size_decoded":30315,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2c59343dc8dc9e82604dcc16ddbe91ff","sha1":"323e2ff7eb5acbc918507e26457f684975f4aae8","sha256":"9d54e011d1f9b213622bb8ef89282575be233bcb86799ae2bb4682def8b4e150","sha512":"0f08f404a98f714df6721950334d5d6d9cb5832152cdca6bfaf8286cb79847fb78a8677f9e1d88273807775cd94b061a52684578241ffe3126ea9a8f1f06991d","ssdeep":"768:cKaOUjYbhG0E7XTqVZF2r1xxDA0XMLXuThrEma1:paehG0EabF2xbFu6hrE5","tlshash":"72d2e13ba9c3a7c9ab3c3ee92ed05510b6d2cb1963d50d2d49117e8123e3b046b6167b","first_seen":"2026-06-10T14:33:32.535928Z","last_seen":"2026-07-17T09:16:39.740548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/ogre-empire.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.979Z","timestamp":1784279778979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/ogre-empire.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/ogre-empire.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys48n2obv1g\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3y4tITIgpxXZ3pton1cR%2BBk37LIC3qyCckn5oaosZ0TJicGPLJdqYm4XAWLDosz02iXwfBXLjYNuNQEJ4FbwDTCFOw0SqawXxFzlI%2BBs5rVtpuqkaAyIjqbwaviGSqm4iQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aa99195695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40228,"size_decoded":41235,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b06565575b459f3e0a70cb837b660a91","sha1":"ad4f27f08f83948c51a6398a32c520548d7ce143","sha256":"672255dd68f271dd48a732815919644eb5a8be565ca0deafab3057d64dc46fb2","sha512":"88450d6b399421b240ba6cc6dc95dd5cdd127037eb30bd316b4e4ee4e88ba9a57917132a88d806858bf85f12b106c62a895ea4b04fd44d48b644a9ada9aa25de","ssdeep":"768:jrTeZqtKCsBFvAGsj1IDcssBVxJ7w6n6TM9nC+k0VLYmDnemdBrVeWTmx86ng9q:jroq8/v61IwVx9wOqGC+9VM1kfTmx86B","tlshash":"1c03f147338df6c8f01f1b2a83cc2bb1ab8775d8e0b61276657d7d6873c044883252aa","first_seen":"2026-07-16T11:19:42.00922Z","last_seen":"2026-07-17T09:16:39.742166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/banner-rectangle-69fcf38451d515.00003694.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.602Z","timestamp":1784279764602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/banner-rectangle-69fcf38451d515.00003694.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/banner-rectangle-69fcf38451d515.00003694.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj45l1p\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvKZ%2BHjWhX6C0%2Bi8rTDasNuokBrzIgfVh6QRitGxw%2BsRJHpah7OqMaTknh5LiuZqhPiXyPa8%2F3u7Qa%2BVYCfMpjHl59wsGnEfGYVPNp5HlhQ02plozBIaGfFPnTSr6XwnCw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550cd5e5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260557,"size_decoded":261634,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"b26ba6ab0a7a204b9e5f8dd0cf488085","sha1":"8eacbef5d85a6ca396abd1a1f4fe061e5470df4d","sha256":"b1d0648941251815180dcb2e0d6313463fff0bd82dcb03b3f74a3386cee55762","sha512":"121ddcd9acd6b68fafb8441ba80d524354fd0d503af05f0ca768dcfec94c7e46ea847ea185433c1fe63ca11346126cfbc28bc27cdfac7a7ba12774a523114a08","ssdeep":"6144:61mppekpoRzPatzp+Tu9u50yy1cPcskor1UpGXrZXEif2l:61mKkmzPgzYywiZ1cksSpGXrZXEm2l","tlshash":"6944234afa47d71e8335f97741f09028647a752f2e6315ba183b5ac7ece20600d9dfa8","first_seen":"2026-07-16T11:27:37.544374Z","last_seen":"2026-07-17T09:16:39.743693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/fonts/Gilroy-Bold.5fb38b9f.woff","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.613Z","timestamp":1784279764613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/fonts/Gilroy-Bold.5fb38b9f.woff HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/fonts/Gilroy-Bold.5fb38b9f.woff\r\npriority: u=3,i=?0\r\ncontent-type: font/woff\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=27cNdtrXdbPZY0dgYOGhLcbgaWEIDGlZcAkMbxkiPWzpaXhW5CpevYThdvZLv23qnVDnKNWLNvqalBT4K72rD0CW22HVmE%2FmHiQXS47g1Bq29IT77yA68edy2sWKxJgvNA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\netag: W/\"dicq1uxec62bse8\"\r\ncf-ray: a1c82550dd635695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36800,"size_decoded":37778,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36800, version 0.0","md5":"32750b00d6f5003097a67377a4af208f","sha1":"e7e72722332c7b79a975e183710b822c70733a40","sha256":"79d5defd745ad33275f5247859cc553964fa06bffeb736c5b25ca91915280e7c","sha512":"6d03302eb25c00c1fc956b2b3b3bcd37a6ec3e591d5699f2bb6c2e084c1bcfb3d73744c88257fb3defb478dbd6750b7ac696f7de53f5fc3ed4f7521073a54f3d","ssdeep":"768:FNYL6mLCywsay9stvRmiPrImwk+usBmDdGif4DNeDJVQr:F2Qyws59QRmWfx+usBmDdF4DNeVVQr","tlshash":"daf2f1ed37b09380686e019a5c879e0a0725833f2edd64fd082738fdb6e93756909797","first_seen":"2023-04-10T18:32:49Z","last_seen":"2026-07-17T19:20:24.661458Z","times_seen":705,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/apple-touch-icon.png","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:05.062Z","timestamp":1784279765062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 2\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; hit; ttl=1798; key=GET-http-rainbet-no.com-/apple-touch-icon.png; detail=REDIS\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nEV8w7hSPoRWn1TuP%2FLOS%2FhSPKbDC2VytR77OQRoPlb1KsaQfSr%2B6fPj8JAlcfwmLokIVYda43iHa84aDyKbV7nJsudzxe64phKP%2FIzvjPebgK5DsFOmLhK7Ousny3iCQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1c82553ad805695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28896,"size_decoded":29916,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-17T09:16:40.357957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-8.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.252Z","timestamp":1784279764252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg16k\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W34piVN8BbIU7MbupIP4Pbo9s9f4Ptr9hbTKxuLpUCST%2Bj4JbFTeVxTtKfn%2FV2jh18NuxVFssmfFoV3DAGfYl9WWu8uqGueC4RBevifAN%2F5lgeClB9bpjn7cPe7E8Qbrhw%3D%3D\"}]}\r\ncf-ray: a1c8254e9d1c5695-OSL\r\ncontent-length: 677\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1532,"size_decoded":1703,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f067e7c8d4607713d8d63ba2d08711d","sha1":"20a435c1f3411e5dbd179427472b1ca3981fc261","sha256":"b21229ed7d078c8045b93b4a6f94c1c724fcb6838b15ce478f089c3d7e77f619","sha512":"5b2fbbb71a885de06ae03c55f95d8b3ffff3bd4c4a4e541762d8886932f8dbd7196f6baa7de14296549f9fcf31d1e7a72ea94d9987b3b6c0788a99a70f89cf7c","ssdeep":"","tlshash":"1131e3f7a349e9d0ca0afbf4b76915e5a6221cfa7ab3caccc2d12d159d5001ecc4c855","first_seen":"2025-10-09T01:23:42.759117Z","last_seen":"2026-07-17T09:16:39.746283Z","times_seen":11,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/app.js","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.181Z","timestamp":1784279764181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicq1uxbyfomwev\"\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8r%2FBSxicrDRYP1neGnRTBacYgRsEUSQLPnoiLtBmwQq22R%2BDxeKAmBv6rzADS3CPmFQ4cvZApagevhVjEYX6s2r0aDNy3wOsxgApWgwmRXGte0wOkc%2F9816KNTUww0weFQ%3D%3D\"}]}\r\ncf-ray: a1c8254e2ce75695-OSL\r\ncontent-length: 7194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42007,"size_decoded":8236,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41946)","md5":"446602e5ddbfae94b239b0bb785ea6ba","sha1":"3c0eff68810340f48a016f2c98b7b2eed00bc1f0","sha256":"b5508c68cd195f6f7145f50bba149082d1922fa489e2be15be5f7e32caddddad","sha512":"669bbcde799f5d2eebd919f6fc2e58f37e85a0b84249c1d84c8c6c40d07d018fa83dfe41e102177dfc23422dc81c6c6eb3549d37969d1384e987b6877e2c454f","ssdeep":"768:jCGaiEG2C0kHxb/U+bbF6aNpTFP4xcDS6zCigxDLJN6XcNFX:VaikE/fPrFPOF6MNJ","tlshash":"ce13948db384b1320597a222816f520bf2757455309ac4acb576c8e1bef8c9da173f7e","first_seen":"2026-07-16T11:27:37.563818Z","last_seen":"2026-07-17T09:16:39.746996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/sultans-fortune.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.991Z","timestamp":1784279778991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/sultans-fortune.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/sultans-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys5hw063fuz\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxGNbr62AdCWY9WWw208Trq37JRiuTZZ3Ome59GsIgKaUQ0%2BDqQLXmeTl86xs5Vz9FxpUQRguCYmCSEqlubtlVxmjIoCjdVEEJJs8aMzD%2B13dKRozXeAlUL8wAgCJ8xzXQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aab9205695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20555,"size_decoded":21573,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"11bd73828f72bfb18ed8202ada492a35","sha1":"e01b3b901f9b7b958b5e007a4879844ac5881169","sha256":"7432e96b07a46f734e397a75668e3a49ce68e39a6740bd1042e4ddae7e839bec","sha512":"a2a4332f39d14db57743e11091d37b90f2ec724587bdc0f64700de5114a861b5fdb9a6a1b7dd0ce369d6da34aeb7d5957057ade6d00f36032eb9bf534560bc87","ssdeep":"384:LOVWEGK6lo6hbRnXSBJx6cpuni1jWpLwTurvrGA0Pu5aocjM4CJHnK:LOVWEr6hjiIC3MVwSDrYo0M4iHnK","tlshash":"9f92cfdb6f934445dacfd471e28adafc2a95d9c9c0155ac2c4a7c4b48ff8da096103d8","first_seen":"2026-01-01T08:17:55.562635Z","last_seen":"2026-07-17T09:16:39.74835Z","times_seen":6,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/wixx.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.992Z","timestamp":1784279778992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/wixx.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/wixx.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys6r4xnucun\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtVbMLJ37slE4c0dy0ip5WBQPjXa4qwnvg%2BXxI1oTjyNCacVWYqlMb96bMFV77774hMo2dvQWfDkrn5HQZBJTYAmWZ%2FNm4ESREvsyNkUutf5Z8%2FpMiiVUxx9tXKn%2Ff497w%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aab9215695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16655,"size_decoded":17659,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6ed171495e9ec7699707fc18f94a1eb0","sha1":"c76b8953c43d9900dd9817882b2d077d91778345","sha256":"0f841896f91a7285a300661f1f091a2d6d091ba9a96a445184f7baecf7fb662d","sha512":"5782035e037715aa2d4a6f56f2c5d1bec70d65e0259507c55bf43d7415a9a4d662e5c43e10a963e1c3899c53b589430e4672b3a72f9e51ce2ab7a7dd1a774b38","ssdeep":"384:kEyMI9iq1AyLJ3/RDboh3spOQ+vLDycak2y4UFqz38R4mDis:kEIj1dJvRwh8pO7vLRavyC70Dis","tlshash":"0d72cf358316aa37f12ccc7a827daa706b1d7904da9b0efe6c4271a9571a2c5d4301b7","first_seen":"2026-07-08T10:52:35.065388Z","last_seen":"2026-07-17T09:16:39.749113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:22.693Z","timestamp":1784279782693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:22 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toyu8WeIi1pnbCyZu2GhaQoAIjjSb0uz2iRVEUDqww0QDuiH%2FWat0VVNBVRr5ZYaZx7XkDL8dCE2jaLeYIeHY6LCYOoJPUUKXzHQk1fSITAd8gs%2Be%2BboNehuW%2BIw83lziQ%3D%3D\"}]}\r\ncf-ray: a1c825c1da335695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":90,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"430cc4e9b207a5a08a60e387fb14754c","sha1":"b4417a2661ad50987409848a72e51d6f6c6b8a67","sha256":"060238ea85a4f5f577034f5ec843411a1d251f49030dbe9f47ed23733bdf34b0","sha512":"bdaff2897d01eff6fc53c68096c4ea0837b24ce64667eaba53eae7eccf68b9a0ccb61b42fbaa16ac173f60a89cbfeb869851bfb60613be138ce084d3d3005943","ssdeep":"","tlshash":"beb012c9400008af01f304195d16318090700e8f50a0590423804ba00a103475003e0c","first_seen":"2026-07-17T09:16:39.750438Z","last_seen":"2026-07-17T09:16:39.750438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/catus.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.197Z","timestamp":1784279764197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/catus.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/catus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyrkuv94b6f1\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi543WdP%2FirEv7u2WndN8eCFZ%2B%2Bsz08RPQcGA4z%2FnAaeFWhn1ayqTffaCc%2BUmZOUzBmHRq9WnsEYA0mR3qVK7rNOI384JZE5UXb1tt%2FWOj5rfR%2FK5RaPrqGUX75C1wkhkw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e3cf25695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8317,"size_decoded":9330,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fdd299db62e55cd5180825a39177427a","sha1":"a1f9df6fee0a19583af1febf3df1428c7ac91342","sha256":"91a219a1b07c14aa10bed70d507ec26f20778cf65a6eef36d7d8f3ac1792683f","sha512":"0caec2a9a46e69000e3e53b4bdac2dd2e43ec5de2d9136ed4d33a27a996a17ea2cbd3a3561edaad4b3ca825045fc0148d491802005fa6a9801ff1d68ff866721","ssdeep":"192:CLffQQyNqLh+phI4dWzsRdBM66fos7SwV47lRm:qffQQLh+phTdUS9uos7BV9","tlshash":"8202af666f5a6040ca5e6c73636d7381cbd7fc248b02256a7865f8d49ba63e387434c3","first_seen":"2026-06-24T20:03:32.891138Z","last_seen":"2026-07-17T09:16:39.751589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-7.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.250Z","timestamp":1784279764250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg1f9\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJRYyTcwsPU%2B%2B8mqlGYZl63V4mgUE%2BCr5nd1Hnlw8CSnqnzBnJdWxFsyeyy7C9X%2B1GmsKY%2FJppq06gTDEg8SFCEJf7EjaL%2BAncPPxFhi9dgiuwkUftWraPd3LYOfne%2F%2B7A%3D%3D\"}]}\r\ncf-ray: a1c8254e9d1b5695-OSL\r\ncontent-length: 864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1845,"size_decoded":1900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"624bc4e3751f4ca5d40b88e9857e4484","sha1":"488ad4523cb171a052b6642e87092a23c5952f66","sha256":"b23ea9af048fb80fc3590708a74087faec19db9cbb04a784682392f474bf939c","sha512":"14f9501a8112ea8cdeefaea80d4a50b82b5c5eef5f963eb7c1854e733aff565bc497192e7cfa5367e9e5055e24d4b94c9e7b931f09260f18d5fb4f0f596c2786","ssdeep":"","tlshash":"ce3100d67798e3e0c947d3f4d83fe86a36513c762f02c988d2a43a68d6016dd988c852","first_seen":"2025-10-09T01:23:42.806538Z","last_seen":"2026-07-17T09:16:39.752942Z","times_seen":11,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/18plus_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.275Z","timestamp":1784279764275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/18plus_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/18plus_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k7311ar\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4CJIdnMNVy%2BkSGGRE6zxTK6pQUf6OjTDKoxNlX9mSHstb4KZ0gBkG5SaX1Zo2rbdVoT%2Fxsz%2FzBJxvaiYE2zTWuNNrTc538PaJlxpf5x7n6JAKdRTg02SsN%2FcjTaFqamzA%3D%3D\"}]}\r\ncf-ray: a1c8254ebd305695-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":1703,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0f9c719dd4e1c3f2c9f15960daf78f3","sha1":"01729b3afd78d2cc88d50ab64459d0238cae0b0e","sha256":"eb4781501da6404c234bce791187043ffd8b76ff71ed4c47bc642bf6983b9b8c","sha512":"b46d36977240a08da3731fdf869363ba9ee385d0a546a716803a98675d8e3cb825b8a42f070a1a0748d87c08dd526597805802253639a509e98eff6b5b1e2e7f","ssdeep":"","tlshash":"d331ccb7abc872e4d64557e6a07a7518f67530fbbb5acf05818826647a0117fc1ccc44","first_seen":"2025-09-23T10:56:20.497394Z","last_seen":"2026-07-17T09:16:39.753675Z","times_seen":52,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/gambling_therapy_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.277Z","timestamp":1784279764277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/gambling_therapy_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/gambling_therapy_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw68k731aip\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0LHy8YhR3RZPCcTXDm33E1v7TsqyaRC2OO7tge3k7NCtdWSdGfAGNjWj2L%2Bhl75%2FlMmVS3p4BRJO55yNq1s74qAP70C3C7GEFGO3T3aYXyg1ze%2BGUAvmXP%2Fjo8TH07e7Q%3D%3D\"}]}\r\ncf-ray: a1c8254ebd315695-OSL\r\ncontent-length: 5576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13633,"size_decoded":6608,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c28a2ec537870b466539e977d126a642","sha1":"411fb06c13fece6d976e46adf4e1853f217e7dcb","sha256":"4dc1e85f5617c3e16712c08673aa0d62f148e3cd7927388fb07234e10f837978","sha512":"2c4523c09af461fa611146331221251e8ae5ede94f5d6553643be12c76d03acfbe144a2bc223dca00d734e22b18b41087a36c11169f773434cdf1da93c244e00","ssdeep":"192:eqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sBMZRN:eON5+E/VumjLMAzj3wB2H","tlshash":"5b52b5fab3d5b2e8e502e7f0e12584317faf34bbbba6c658c6842dd0e61100c5e658d5","first_seen":"2025-09-23T10:56:20.459959Z","last_seen":"2026-07-17T09:16:39.754315Z","times_seen":47,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/avatars/firecracker.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.902Z","timestamp":1784279771902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/avatars/firecracker.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/avatars/firecracker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpyrmpjs5u4i2\"\r\nlast-modified: Thu, 07 May 2026 20:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tuCNxh9hTWojiilZgiW3MrPaEgo4NGk1yv5hY1J9%2BnCc2lrzpNGeE1AkH0xgxM8%2BiZ9TiJ%2Byl5YC47gZddi%2BGJkxadSTx13W%2BiJ68ImRvsz6AI9zjlP2oUZ18IebPoEhKg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e6eec5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5834,"size_decoded":6849,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"3aa2596fd5753cc56c038112e0e4201d","sha1":"ec113c9b30337c5dbdaec24e9d7370006f4e21fc","sha256":"a76121128b9081a2f89242d0dce4b17c5fc830eed57cf9a45ee8756d29ded457","sha512":"1bb45ba942f8e4fc9318d96fb7effed65b08a2ce53fd90808c37a50eb98caeada614044adaf187b9778286d4585732be75172de98a0db900be8c850f5a38b47b","ssdeep":"96:wzfLzVh/YkS5d940wovsTE+SDpVgyWf8e/NzFy+W0mhMeAVFOk12Hjcc+pSmw4:wTLzVZS535wokz0pV+f8eFh3WOe3w1pj","tlshash":"b9c19d375325e072e60e1d7e6f940362786be99a93f5b25238da4ec943e11814fa8713","first_seen":"2026-07-17T09:16:39.754936Z","last_seen":"2026-07-17T09:16:39.754936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/funky-fruits-farm.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.988Z","timestamp":1784279778988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/funky-fruits-farm.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/funky-fruits-farm.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys24fm1zn2s\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31EsQfACEtJk6UplPcNT8G6g%2B4fnuJaCfBQHFfvP9zy%2ByZXDmE5L3IjW013dJCoLXVZuiXVhoQBtBkY1hqmc34lNB3SxOGfX8mjJS6POo%2F%2F2V2fFsNVJKG69aQUTfLuMVg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91e5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29908,"size_decoded":30925,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9e2fbbeaaaa980e46363c85488fd39a7","sha1":"316b699fc4ef5bb0e4ddd5e73334833cb81ab95a","sha256":"1ee2a1f2f74c634ea7e54dc1f7bc434353267c27dfa4ac25fd53ab313ac68a55","sha512":"9710dc77cc468dad2423b451827e0160469e88ef93e7a98a3a591f1c1c0ecba4df7c39527e616a02088076f38143d15d76d655c8bb3ec339ccbdeb7cad733590","ssdeep":"768:eEQcj7ceD/Zs4K8On2JY0RpqKdt4Rab3LgbAUmbqxk:zceDa49On2GkqKd2RygbWbOk","tlshash":"5cd2e161afb0fc9be24c7eba0e4509b487776d49a287467816881bfccb8751ff211817","first_seen":"2026-05-01T23:27:36.667803Z","last_seen":"2026-07-17T09:16:39.75623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/blackjackpro-montecarlo-multihand.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.950Z","timestamp":1784279785950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/blackjackpro-montecarlo-multihand.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/blackjackpro-montecarlo-multihand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpyrwfmk4yos8\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv7LKyxpxY8En%2FwEtcmdLrFmwk%2BN%2FaHC08qILv%2Fluf2mpFSKvRJKS%2FL%2BcT%2BibtdN1MmjVDl0J7lMxVexv9aQcXeRVQPsKcWnmctsUz4%2B1%2BduuPqqfyft1rxw%2B5Es%2FwcIxQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d63adc5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32120,"size_decoded":33167,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"dddafc7ad0d52c4394ab4de129a8fea3","sha1":"445f1d94995250a149fa2af22ea8ecca4984fff8","sha256":"4b34d4f24816e22c71482342995367bbbead17ad2cce2f4f7c033e07a7c83597","sha512":"9259a022eb8cb9b0d175d452cb287f2594297782441fe0b1664a5cd6a3d45ac195716e25ef8808fe4b2c6d0fc02034effd7c8a55848048dbd6c2aef4c1ad145d","ssdeep":"384:SYmOwwV3uQq9XifTmX6vbO01nx7iiNbh5dqyvQZACgSi5owuW6ubK8LQACabCzZR:SMluWTHvtHZqnACgSi5/lGuJCao1lhxl","tlshash":"0fe2e00c6d6bdfc5fe8f0b7a9b78343e8130c44a0b3e90964da979498d316d04a6f620","first_seen":"2026-07-17T09:16:39.757678Z","last_seen":"2026-07-17T09:16:39.757678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/jazz-spin.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:11.930Z","timestamp":1784279771930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/jazz-spin.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/jazz-spin.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dicpys345lyymru\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omyhKO1eWFuiAnJ%2BVTYtODZC8b0gFwKqbsZAjZplE1c8EMi6PdEU8lvewdlJcWKposn2s2r%2BgWDgZPR6NEnt9NfEudXWsiEMtkAF72uqvVd46RQ3TLHaR5yYUKGsasz14g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257e9ef95695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29514,"size_decoded":30519,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c05c9452e6057b1863105df0f1fc7474","sha1":"bbe651fe68681d2cbc175a5f2f03f6323bd3e84d","sha256":"e3230b80c2e35762529d38c117d8f0535ea18522c4b7862f7941dfde8519fd18","sha512":"452dcbe3ddf0f159953926e6f6cc614c543f07d76f57beb91c79b4586e2861d50150aadf98f55e0794cdd2379aa3e90ddc776d6434f57c8aac9ee5182397a9a1","ssdeep":"768:khDbUjdh5IJsdoYd+fJdNhxy5K6jNR7eyK+:RtLdsbNhxy86jNR7dK+","tlshash":"96d2e1608f59e25ae26c6121005c8810bdd26bf1c15e46f7fed2492432af7eea9e350d","first_seen":"2026-07-17T09:16:39.758831Z","last_seen":"2026-07-17T09:16:39.758831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/2026/05/baner-1-69fcf3846360d0.97145228.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.188Z","timestamp":1784279764188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/2026/05/baner-1-69fcf3846360d0.97145228.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/2026/05/baner-1-69fcf3846360d0.97145228.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dez1t2muthj4hs5v\"\r\nlast-modified: Mon, 15 Dec 2025 19:47:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SodLnMTTO%2BBCq%2FRdvA7sOyx5CFXbGPPAQOooKMSWnknfwuzNLhzPoHQY5Z0IxPaEmF0QdOQeinSYc8ODsQCM2MBnQHnLGjeia7ckC3T2xDu6WltZK3ZtSP1HOqoAmTk%2FQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e2cea5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":829651,"size_decoded":829548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"0232535bb4fd62f0099dd120f108023c","sha1":"36069ef4e99fd85c8d883674dacf48288e5a3bbe","sha256":"40a89f947695044d6b68c27fefcd12f5f1cbc8a434fd271969692e0e4cab9838","sha512":"be6817b5fbf92d3c0ae4910dd054a387584a929be544ee9fab60d6fbef83f00a3d58cc63668f01c83cabf9e34f67888e9f1069eafa12412777d42b618a3b2b93","ssdeep":"12288:qXPb/Ep4THB312HWbdHCt1b/PYq7nqhWDbfzypiWKgq3/54xJ7Uls+a0WwnWEbZk:uVTHeHACU8KW3ak3/5YUl/1zhO/V","tlshash":"460523f0d963847b3de67fa64ec9011a8b56bec59cc40d3542729a238f42516f6c38af","first_seen":"2026-07-16T11:27:37.60706Z","last_seen":"2026-07-17T09:16:39.760017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/fonts/Gilroy-ExtraBold.cb761043.woff","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.612Z","timestamp":1784279764612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/fonts/Gilroy-ExtraBold.cb761043.woff HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/fonts/Gilroy-ExtraBold.cb761043.woff\r\npriority: u=3,i=?0\r\ncontent-type: font/woff\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taRrOaihhOfDt87F7VXoNBdZnuS2d0wqL5XvE%2FH2EfdJQVwSs%2BaJX3IQk0v2K56IHZfsRHEn6BgoC%2BjCY7XQ6E9SSYMzX%2BLMZ8boibXkQbl2vrhEVm%2FEqNY10QK6E18VQg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\netag: W/\"dicq1uxec62br9g\"\r\ncf-ray: a1c82550dd625695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35332,"size_decoded":36323,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35332, version 0.0","md5":"2037b7c09569dd6f0ca302d92ec0c23e","sha1":"fa50cb1c6e90f5608cb8f347b124847a0b5de9fe","sha256":"ceef83c155b8c977b7c98f4dc5e6068071847a95fe327a466033b783cfae1903","sha512":"03520872345e71b7c38ffcdbed62a86f2812a475cf22ec9565b403702a110dd6fd900eb448ea676c1c6e1f2e39acc9d7b8a0e0cb7153af0afa539d5c3a41df93","ssdeep":"768:cxcTwmaEz9hhY+jgK/aJxU/HZUS8/Eblszf7GDpdSFOr:Nwmhe+j/yMHTZ2rPFOr","tlshash":"73f2e1c7bf9a3be14e45c2c6c81f3dea580401d8989544a94c47e67dd21b7237673b8b","first_seen":"2023-05-02T01:09:50Z","last_seen":"2026-07-17T19:20:24.635184Z","times_seen":255,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/childhood-sweets-christmas-edition.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:25.941Z","timestamp":1784279785941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/childhood-sweets-christmas-edition.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/childhood-sweets-christmas-edition.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dicpys0qf7rug82\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHr%2BbfTpQGhPbpKSclwkLH3vAu1O1R7FXhvp%2FsTOFMrFSW7kxcL2aircQBLg4gXU4HCGYFGL9vtN5mufio2SKKJwxgPkFkfjxYUdKufvwrxAZBnkAlCEudK4tht72HRDOA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d62ad75695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21026,"size_decoded":22056,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b0e86f047b86c3273c066d47bacef76a","sha1":"82dceb013dec8b9f53f7200af776529e06a8f05d","sha256":"68a8da9aefe1ae9b9ebd6ee901cad36aab0e03c60c260ffd902b059b60cc5f9e","sha512":"9334f97218a2fd9db474189ffacc90f77d06ecf08ecdff0350eef13b6f8a4ba69591e518ff83581e8380e64cf18a976c13128a968814b5f2e09dc92c9b3ce004","ssdeep":"384:CUXELm+B6vFyfRGk6IX4/YdTJPHlWVe6i/q2f82briPazvdGjhUI1:C1bEv7k5X4/ykk/9K1UI1","tlshash":"2992e16ee600041ff3bc97b7c12b6feba9e04548fa8176f793968301f7084b98165ac5","first_seen":"2025-10-08T14:20:42.605704Z","last_seen":"2026-07-17T09:16:39.762821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:16:02.226Z","timestamp":1784279762226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 17 Jul 2026 09:16:03 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Mon, 17 Aug 2026 09:16:03 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en025bb718747429373ee9e4ae8ad245a3\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfLvMJO6PAUGqlV4WvIYlq4eaFekKaEYk3z2jyk6nLyD%2Fpsmp7Im%2F56iGebJOY3WBy0Ys9ispulC%2F7H8VJrKb2dD60I%2F%2BTlhyxTy8K3x5ye1lWv4k2rydDFxRHWW0cvIsA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c825424c935695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144321,"size_decoded":35140,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7143)","md5":"7ceca671cb008d539e7bef46f4c2fd81","sha1":"7267bc523b5b8928ffd31b2beea03441531a8cfa","sha256":"78b69d2e0ca657e092a146608ae66a50fc4942acfbb2202a90757fc6156b0c85","sha512":"2d125a4992240359ab0ec4d08b2e0074ebb4f0cb91ed9e4a0b2f4bd548366d98dfa4eae2b10135eaa0384b4326fc35f9376230634d5db968dafe851d4ade33b0","ssdeep":"1536:dOVewPuxHnFpSgJ0a+1ZgAqTUOuKfDBn98KtxQIZkzYPORHMugCTWSewPu0an:dOUbyCO+i8n","tlshash":"71e3d6d862f0a4a744d682c27f615a6f3e95d253c9550900f2fc4be91fc7c68ec2b68a","first_seen":"2026-07-17T09:16:39.764074Z","last_seen":"2026-07-17T09:16:39.764074Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1733,"timings":{"blocked":0,"dns":44,"connect":15,"send":0,"wait":1610,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/samba-brazil.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.216Z","timestamp":1784279764216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/samba-brazil.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/samba-brazil.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpys55zc73qjv\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erNqEGUinr5TqJHMcosTafiCCV1BxlnfUTELWMZdW%2F3ylHdMKuyrvgB0KD09PtrX5ZVqStvsPOKYqIxZNUqAGetdxGvOEP9GSpMqNqKk21X3vaqW9GSsoPo2GDqHJcaewg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254e5cff5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34411,"size_decoded":35417,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d6534c884c8355861d3b6320f91edcaa","sha1":"fccfc54b03981adae5a3d1f3a5612db7e6f2eefa","sha256":"406f24339ab296a27e05d9ac76379ccc760055c5b1cb2cc7ce0a184dc8913d26","sha512":"2cc7e42821da831596cf8601dc598b9ae10f41f25405e4080224ea559d55597905a00f28d35170bcb23d075fefe4fe8aa6021a1d1792e2b41c9e505f632da817","ssdeep":"768:XybGBqZDEw3XH2PpP4EJfhwkd1BU1xvquPUY7KXQUbNIh7Of4UuCCD:XN+AiHapP4ASUBUbP7KXiOf4UwD","tlshash":"70f2f1b33e65d341c0676a352ad7bab6b9620c6d3141671be7e17d0a63122e0f43d12b","first_seen":"2026-06-19T02:29:17.683726Z","last_seen":"2026-07-17T09:16:39.76618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/madame-destiny-megaways.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.985Z","timestamp":1784279778985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/madame-destiny-megaways.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/madame-destiny-megaways.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys3ryxwyy92\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB2JH9TjXOsUhSrju4RpHBZS%2BDn0ntclbv%2FoXvAPTW0Ep9A9S1MdJB9XHNi3ydet1XLLqvZsNn49Qy%2F%2BO7uLEWINwfxjnWO97IgCqYfHXthACwXA9TLOXp2HsFzrLNc6AA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91c5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44390,"size_decoded":45413,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ecbf17eadf7c10ac61bc36328289ef8d","sha1":"3be976d8ca452a3025991c6563d7d0948be870fb","sha256":"a2bdcfdd4fff484659ef3fc8dbb6266b901473c354f365003b0d5facbe1dd248","sha512":"59a157a6a5b8a89d64c4fcec05dcc0b924b5af0b3114c0392f6e82ae0697cb08510cca7be1e7d0d7937ed442429955235ac7e0a815b9d586c30812747137223f","ssdeep":"768:9HxBYzw6WcbpZBZA/GZ9EVkRRg2HamuG6NP43B1GkGdVk/965WV:9H0H7D3A/4qORRRaZFkGzgZ","tlshash":"db13f1a66c2689f9ed8e5278c92c957d57b9dc4060f4491f1981a5cc332e0c3bad4fbc","first_seen":"2026-07-12T15:18:43.85221Z","last_seen":"2026-07-17T09:16:39.767839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/app.css","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.159Z","timestamp":1784279764159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"djzcb5kfaora19xz\"\r\nlast-modified: Wed, 15 Jul 2026 18:01:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2By9w1Yzcs9QAezSk3KmD0VP6TZYe8gSdt8S3M8hcyXsFEnpZD4h74QfuHAbtcEY7u4labSFUkb9AJCQ00TErDFwrn08piB6jKwBzjyy1ytlhqEDjhZjOkcJ%2B%2FHnKYlXJOA%3D%3D\"}]}\r\ncf-ray: a1c8254dfce35695-OSL\r\ncontent-length: 10464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59543,"size_decoded":11502,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59543), with no line terminators","md5":"1d1074845a401e3919d54a8217e0a412","sha1":"d6a9f17e21fd3673a803f3b522fc2286348f001c","sha256":"80e91dde6684b1b7a2794a0bfd66b17b8c3952eb9f9f93cb0082d4d9fb1d90d9","sha512":"777e7bea3a7c5a780e1cab82a21986b742a6577afed60e678e53a88d7dabcc14fc9bf8fa893ffd11bb9428cd222aae10d730088df25b7527c0b0c5558bed53cf","ssdeep":"384:LcZ5LQHKIighjYbxxoReyPvlawHJpNp/zC2Rn6LK2ndJkHvxb5ZEq++euGKokfv:LhKIigqVuReegELFnBpz+3M","tlshash":"33436322264a603cb03fc565a4d1769d322cd807e76b57fdee626175c9cb2e31732b88","first_seen":"2026-07-16T11:27:37.632465Z","last_seen":"2026-07-17T09:16:39.769301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/winners.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.192Z","timestamp":1784279764192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/winners.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/winners.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvg1dp\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vJBWh4wwSTTsgYML%2FEiya%2FGKKKstYGVR9Tm52jHwxvGvotfhysvDE06QlPj1VV4U5EeR0EWtzJ4JsydSiBu8Z8YI581LXZCKH16w%2BjlJ2bNeBizUroykLoLWMPNP7Qvhg%3D%3D\"}]}\r\ncf-ray: a1c8254e3cee5695-OSL\r\ncontent-length: 731\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1789,"size_decoded":1746,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d01d878fbd3570853ad29e770f2170b","sha1":"ee940c29c9a16fcc8c62f5de9c8f6e6fe9f75c26","sha256":"48019e9ef4ac38cdf2fad971e3a4f397141d52b53b0cdb846bab37bf77073715","sha512":"b180dfe5fcba675a0ad88283e2fe57abb85464d6b23a15afd9f6d132a4e2454a22f56e71ba6e4ad4fd1fed1b48217f26d75dcb7fdea96ef1d68cc4adfe6602e8","ssdeep":"","tlshash":"44318ef3164d4194d60fa798fd157879506930ff6ae44bc55380aae128784efc9ad8c4","first_seen":"2025-10-09T01:23:42.810136Z","last_seen":"2026-07-17T09:16:39.770836Z","times_seen":8,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/play_icon.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.215Z","timestamp":1784279764215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6dbnvgjl\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOX7iEhJv3yVxQIV0hs8baLzoFbJObPQ9ajX0WB96fpJwsm%2B5SxHbIIvM7RyY2X0NVmIsiLy7k7bnxgOJOT69oNWPjc6rfj694NoSYicAhZjnhH2utJqM6WPAE6tbWpZTA%3D%3D\"}]}\r\ncf-ray: a1c8254e5cfe5695-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-17T09:16:40.320617Z","times_seen":36,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-14.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.259Z","timestamp":1784279764259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh931n\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvxoZ4HaHGrCRfrCZ%2Bu59cltoGA4RoTuwqw8aoUY9cBUNJWOp%2BchvsfvUZz4gT17r0z5b%2FymvnvrGbNJamnUbkEyCG9i4Fw%2BGOzHZjkN1mAI1iZuJgL5gpBFvyIR7M%2BvjQ%3D%3D\"}]}\r\ncf-ray: a1c8254ead235695-OSL\r\ncontent-length: 1403\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3947,"size_decoded":2435,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac36ec2617047c11d7d7bdaba49dcdf3","sha1":"187f161f11f6186d01bb3f1a7a63c39734646b02","sha256":"ad32c6347e3f34535dfd5ab7df9f16757d4cb81d73e5e93971362d9dc74eefce","sha512":"21d1a66d2db907e9008bb416dc13bbc29a5ac9b75b05f83a40596e296ebde5a9d1f9940d4907e27a06dc8ea92c3d389b4e08189c5b8e10b8f40bc34106a6abdd","ssdeep":"","tlshash":"d6819ef6d7e157e4854a6ff8d912e972796728ba7f95c79042c0ca61f62103c8e8fc02","first_seen":"2025-10-09T01:23:42.770399Z","last_seen":"2026-07-17T09:16:39.772179Z","times_seen":11,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/build/frontend/images/header_list_icon.57e854cd.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.606Z","timestamp":1784279764606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /build/frontend/images/header_list_icon.57e854cd.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/build/frontend/images/header_list_icon.57e854cd.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPSXWWDtVkZu5K9au%2FZTLy8gqiCS4Hwv8mSzg7Rycxma9aSaI8NN48cn2s%2BajJ2xSv2%2F2P6Lbg3b7YNrWxgfPTG2VWdNSLRnxr5QTTgULGCWTSCxagG6lRxKFVvLqaHCYw%3D%3D\"}]}\r\nlast-modified: Thu, 07 May 2026 20:20:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dicq1uxec62b62\"\r\ncf-ray: a1c82550cd615695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":1182,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b1812bc3801d44d3d6238b9215552e3","sha1":"988a89cdc701aa0d5d63672c862ecf92327a9ee4","sha256":"c753de905aa33f67f5072121e58e6b5b75b2a4af6640eb83dd1d3f7349be098f","sha512":"06d564409abcb9dbb7a0238f42644955789f46c18a7339e246f1345e8afd9097a4c907136e324f4c488ebe9e9ea29fc636206fa383a52262e0e7409854747375","ssdeep":"","tlshash":"f2d0235b620c8c2db1354c14d354713500b31153054c2154d8715135f0422ce7d3b5ec","first_seen":"2025-10-09T01:23:42.714227Z","last_seen":"2026-07-17T09:16:39.772931Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/ajax/game/","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:16.637Z","timestamp":1784279776637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-no.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"133\",\"55\",\"1542\",\"357\",\"371\",\"2032\",\"1093\",\"2385\",\"2266\",\"1322\",\"128\",\"2066\",\"186\",\"1662\",\"860\",\"2396\",\"677\",\"86\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:16 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ni5rsAIjCVxIWcX%2FJCppoo0%2Fo2XAu3bFWq5hdvvoMQTAGsT0BXyhuWDu3UMw6bXUXxY8fVzNFB6H%2BbYr4q800A5b3ZUJZLG407hwyxUHFz5p4wjy0E8YrYCURyVQyhXpVg%3D%3D\"}]}\r\ncf-ray: a1c8259bf8815695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":1031,"mime_type":"application/json","magic":"JSON text data","md5":"03caad88c31fdbaadff25b60d73a9795","sha1":"1abdf8d345516de459ae82e2d28c96394796f583","sha256":"0aa2456ec0677f6d10c93a827423c69cc1b7971bc5f1378ccf384439e7acab00","sha512":"91b2d8af9758bf3ee3b368a7932333b3caad7631db5ebdf20541469e4ec6d1662db36b3adefee80f883b5a08ed729bd38ccd512c961f7371242f94735102cd07","ssdeep":"","tlshash":"3aa022ca88c8ae0f033380202c3f30e8a8e08f0300b03e00238eccc00a300820023c00","first_seen":"2026-07-17T09:16:39.77355Z","last_seen":"2026-07-17T09:16:39.77355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/tombstone.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.978Z","timestamp":1784279778978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/tombstone.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/tombstone.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys6832i9hhi\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xp%2BWvt0AQFaCtBTlQ%2ByYc3ZIdOOccU8FITME628aYbiMb1DbB6L%2FCxTQdhUtz2bCh9Sir9bwJYngo%2FUikCd6ZlpgonQ%2ByHcWu%2BsNmFOFpZL%2FWJkxp1sRw8ELhnjnLk3UMA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aa99185695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22662,"size_decoded":23677,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"03520ca6e4e0afbb3678d9843a5abb2b","sha1":"38303b9ed9d5484c6b1bc5c1b0f1be55f7bb6e60","sha256":"0a6aed2520ac19eb9f5ee481a2497fdca4ba50a385e76ade55be96b110cf418d","sha512":"826022f865790e4382390dbf45d336f766c7625d2e683c82ea1142250f02dec9b92d835ee6941d07adfaf81c23937370fbf70f0c8597fc862cb6146e42a5fb53","ssdeep":"384:HPkVlElxt6SIwr7FPdVyA+OT6xlm8Jt0NKEAOEd/0yHcUT0FOfEcS5aTJ82LmT/B:vrzt6SpgFx2N6OE50up6O3StWm+QN","tlshash":"51a2d0b15dafe0eb67aeb47e2c0d96a2735520f580763caa803fe406c3174140d98a6f","first_seen":"2026-07-17T09:16:39.774798Z","last_seen":"2026-07-17T09:16:39.774798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/uploads/media/games/reel-outlaws.jpg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:18.984Z","timestamp":1784279778984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /uploads/media/games/reel-outlaws.jpg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-no.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/uploads/media/games/reel-outlaws.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dicpys4roxtwibo\"\r\nlast-modified: Thu, 07 May 2026 20:16:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2F9q3ShAdTbaqwNH4OKFuvFbqjSSxKOY%2FGEGCOBL8qoMSsT0yxrIIn7v1LUKsJEpjJFD5Zgfcz6YpImJycGqivgH8fQpq8Og4wO4YAOtuabu2Z65bXF5STE7LzrkTMra1A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825aaa91b5695-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23748,"size_decoded":24756,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d82cc03a1810dacc009fb892e8b8a5f0","sha1":"8d884ec7ea965fe26846460dd4aef55b394551b3","sha256":"16cd29a2de0242350d66a34edaa2d5883b981c203a35075e67f179d09336eecf","sha512":"b9df9c87e912320e6453997457b35a5b4a39f696ff0aba16c1c946e7d2443d371c43aafd754a3e1cf2bf551011e422bb7c729c32accadad91c8df9d97cd5e7db","ssdeep":"384:tRvM8LdxNaMfBrb/TGTBJMACTPhk8EoB7iLxMQKVvNipMM3UnAgrWHSwCk1skX0c:rvHLQg3T6BhUiLrivdMDHHCkOkr7Iuh","tlshash":"35b2e19eb5d0dc69fc6ed7f1cc6c0398634f6a0b960765e368c94870cf19573a384a89","first_seen":"2026-03-16T14:22:50.793877Z","last_seen":"2026-07-17T09:16:39.776247Z","times_seen":4,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.com/svg/games/table-icon-13.svg","fqdn":"rainbet-no.com","domain":"rainbet-no.com","tld":"com"},"ip":{"addr":"172.67.131.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.com/","date":"2026-07-17T09:16:04.258Z","timestamp":1784279764258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 02:23:42 GMT","end":"Wed, 02 Sep 2026 03:22:18 GMT"},"fingerprint":{"sha1":"B7:1A:E5:BA:4D:F1:54:C7:B6:EB:3E:8C:74:C3:3E:54:3D:29:79:E9","sha256":"22:BC:F9:36:BD:1F:B0:F6:02:8F:63:73:F8:64:7E:0A:17:C1:A7:10:47:6B:96:1F:BB:22:FE:86:2F:00:F1:1F"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-no.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-no.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dicpyw6axxh9f4\"\r\nlast-modified: Thu, 07 May 2026 20:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Wsz1RxrQlP4KnlkIpIaVUYy%2FCjI712pUAzfDzj4PDlnC71Y9CCTBUioNxRkktJIVixDKcT0N%2BVMYxzeDnEFk6pTiZJKs%2FMnOr%2BLoCI2ZF00fVgVmxodkGEftKS4%2B8Dv%2Fg%3D%3D\"}]}\r\ncf-ray: a1c8254e9d225695-OSL\r\ncontent-length: 312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544,"size_decoded":1344,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49d17978b27f29b48b70ad94c0862944","sha1":"9fbbd0908dd4da41c824609d3a873e7326266047","sha256":"11f97e8de245292bccc9bef28196a670270a2651755376c991d17234f202bcbd","sha512":"638bf7f86fef3dca140ab050800244ca11c4cbfff60e69f36670c520eb07c963fde70e097f48b5eca2dd9ecb18082d1006818359419af26852d1a690fd7cc643","ssdeep":"","tlshash":"a1f08be1eac8d2e052118721db3b7019246f14d93ae98459a2d02b91f65019a8cadad8","first_seen":"2025-10-09T01:23:42.761758Z","last_seen":"2026-07-17T09:16:39.777877Z","times_seen":11,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-no.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}