{"report_id":"b9c4f418-b357-42c0-8864-09a022d7dd1f","version":0,"status":"done","tags":[],"date":"2026-07-08T11:41:14Z","url":{"schema":"https","addr":"rain-betcasino.nz","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"104.21.50.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"title":"Rainbet Casino — Independent Review 2026","dom":{"size":83936,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30407)","md5":"2ec36313b6573fd42f3f25246131e645","sha1":"62ff68152b0c268332f24247a31ca700585758d9","sha256":"b176f06a6e30b13634190c5a0d6298199b298a8d3eb16f2b42751d79c56e3404","sha512":"4e2963633e8baefd117d258e4522db1e283f4c76e135367910fbd331d44145855972f33ef880b3c5efb0bcc25b5021906467de21a907d8bcc6498dd037927ed5","ssdeep":"1536:dDnr4Y8ER5bqgA0Rf15fZzLfPWFbp651eD:BJHb2+1eD","tlshash":"9f839535a984e237327359f0b6216f4e62d6942bfe130d14babdda90dfc6d8c6d32184","dom_hash":"domhash5b41e5e80245e2442d5c6bc23dde6f9f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rain-betcasino.nz","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"104.21.50.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:41:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rain-betcasino.nz","ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-07-08T11:41:15.087633Z","last_seen":"2026-07-08T11:41:15.087633Z","alert_count":22,"request_count":11,"received_data":433596,"sent_data":5662,"comment":"","tags":null,"fingerprints":[{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-14T13:19:05.69852Z","times_seen":331455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eececaa090b3a9071b3f5e4590c0368a","sha1":"df9f15810baa93c0a6fae10e232ae106f50e04f1","sha256":"b6a59390d6134a56c8bf35ed98faa388f805f388ed555c2b86a18a8d9adbc579","sha512":"5dce308d378cc4eb1c63c4fdc9e7def7ebcb0dbbef22cfedaec4fb316fc6d0f8b3a02de97bdac4ded12c07e91d4b5436db2c3aaac99ba1600ffee88d81987ce3","ssdeep":"","tlshash":"c4d0c2abfd451f360cdb77b721afabd979a600825c4920005a7998c10928d8225b7dd4","size":287,"data":"","first_seen":"2026-07-08T11:41:18.31272Z","last_seen":"2026-07-08T11:41:18.31272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4078b0e4ed1c45d00cdf04f0c5d3b5d4","sha1":"aa30dc10442903b3d0d90bfe37299eb6813a03f9","sha256":"75a88645191d93c861314fc7cf24a8fb1d4a77482b24eb2be5b0808c5d1ea521","sha512":"80c73ffd57a8e1f9e5a4a3873ac786375042ad122bf21cd6767d370ed44daffc3b1bff812fb4d733a892867b10d30e45124282c9b0fd712008831dcfc9f32230","ssdeep":"","tlshash":"b3b01204640490f4c43200902fb7370534235004457c12500109c0c2302240fc8178f9","size":93,"data":"","first_seen":"2026-02-07T07:23:30.276422Z","last_seen":"2026-07-09T21:59:24.970407Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3eff9a3743a9c4594afc2f2d3fd2b1","sha1":"b15b521d199c89451b335915c4dd220def43005b","sha256":"72978c55937141a034cc4ff42f04bfdea2aefba8f0d46a9ad5c250962bbf1593","sha512":"4d24c00d9ed194f018eb31ed940e7458366acd6230a44b959774461b3c8c1599324c31d584d4b73622fa870b1c0bc195214a13800e3c939dabf3907910b0d36c","ssdeep":"","tlshash":"04219b19a8f37170a43b61badb6f8208a0ef0423750bdc50be7dd9844f6089a1669dde","size":1201,"data":"","first_seen":"2026-07-08T11:41:18.314671Z","last_seen":"2026-07-08T11:41:18.314671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/js/app.js","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b291f1f26b0a442fd700eb2c62a337b0","sha1":"90057b7230f69cb2098d74fa31772e213141d794","sha256":"9de72185c3bf1b82f4fbb9a0eaf5dadb10afe0da17bd9263c2a8d6572f6498bd","sha512":"35ed6b033012fcee90d2e3055a3ed89aebb83394563920804f6582cdac3eb718c6c19fe1e8c758824fbbc10b23ae751a65c22902452221405292ce8beb9a3c73","ssdeep":"","tlshash":"6d21a50a322682bc47f131ba3b4f2544eeb60101542c8160a512d8803cfca4e4b37fbf","size":1321,"data":"","first_seen":"2026-07-08T11:41:18.300403Z","last_seen":"2026-07-08T11:41:18.300403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.872Z","timestamp":1783510851872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rain-betcasino.nz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553940\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-14T13:18:50.894097Z","times_seen":234317,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":17,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:40:50.779Z","timestamp":1783510850779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 08 Jul 2026 11:18:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuQuuwk9mk9%2FPamYMM90PmZJtSbzDXrDtRMw%2BKfwjtJvZ8juZzwQcFqXu1LEpW%2FLfIiqNBjLLdIiIT3rZASctRSMF8ybv5%2F%2BzAw8W3iuon6i63xUVWweAIaPxqSugt3sj4K5tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a17ed1019b8756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Yandex.Metrika","description":"Yandex.Metrica is a free web analytics service that tracks and reports website traffic.","website":"https://metrika.yandex.com","common_platform_enumeration":"","icon":"Yandex.Metrika.png","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84076,"size_decoded":19370,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30368)","md5":"4a02d41574bcde1e2354b1839fdfebf0","sha1":"2bb9074a4295788861821edf5955461acba3a139","sha256":"7fd87a2197abfdda651f74f154f92f7340182f2d98384dc6798a2fa74079caea","sha512":"cd1596ebba9e441a4902005f848895f2a1bebfa67815496b17ecc391668ae77617405f6a650512b33f7ca7d2bc4d5794f82ac1c92745bcc3d45754e040a379a9","ssdeep":"1536:eDyrnY8qRCXkhxt2auq04YC0kjUep751en:nYYXAF1en","tlshash":"0c839535a984e237323359f0b6216f4a62d69427fe030d18bafdda50dfc6d8d6d32184","first_seen":"2026-07-08T11:41:18.298741Z","last_seen":"2026-07-08T11:41:18.298741Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":15,"connect":23,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/js/app.js","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.465Z","timestamp":1783510851465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:03 GMT\r\netag: \"529-655b57b254cae-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgD%2Fu58WZKRKdaWHuW0AAuKVX9Le%2BdDA%2BXi%2BmFM7ITKGAm43b0eVthPRyzYw23XIpJX9bbA4i3TLWshHUYzTBjU%2FxhIb8OzA22Nc6ZImANqP3Ak3xGBt%2B%2B3F8NzM2%2BOt58k91A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105aba056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":1735,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1321), with no line terminators","md5":"b291f1f26b0a442fd700eb2c62a337b0","sha1":"90057b7230f69cb2098d74fa31772e213141d794","sha256":"9de72185c3bf1b82f4fbb9a0eaf5dadb10afe0da17bd9263c2a8d6572f6498bd","sha512":"35ed6b033012fcee90d2e3055a3ed89aebb83394563920804f6582cdac3eb718c6c19fe1e8c758824fbbc10b23ae751a65c22902452221405292ce8beb9a3c73","ssdeep":"","tlshash":"6d21a50a322682bc47f131ba3b4f2544eeb60101542c8160a512d8803cfca4e4b37fbf","first_seen":"2026-07-08T11:41:18.300403Z","last_seen":"2026-07-08T11:41:18.300403Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/game_catalog/slots/sugar_rush_1000.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.475Z","timestamp":1783510851475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/game_catalog/slots/sugar_rush_1000.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:10 GMT\r\netag: \"3eb0-655b57b8fadf3\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Otmv4%2BfymSBASSpvtANd8XLLJnh7hsM8V90O1ELxJEKKyAOB%2FhvsNKm0Rb%2FI%2FyFc4S77z3LWKkropaYyqtS0gxyn6kTRpB9SDi9FS%2F%2BG73GQObOLE2l9u8IT%2ByXnYpEMDKySUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16048,"size_decoded":16916,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3876d33d07f852649f77c8e31b108787","sha1":"c504be20b7abad9126417a964ac078c944157385","sha256":"587a80b4bf835c8470a9e63e2d5cc89577a4acd0c18cc4d45a6beb3c426dc4c2","sha512":"c921d532cabfd06c2e7c9bf9aacf982ad47fa2f00e5632c4e3a24139ac44c68ce4c9d7018142ab3b4b51e2376162eef49c0fb8fa69949c320f2b7b415df29f4b","ssdeep":"384:qIDHADur+YmPIBjAHrky1p7sN02iVwMa4dK:qIgDYUXkGAN02iCBYK","tlshash":"3072d0670c4a07d2b4b0ca002db812e64e093a975d53db677393bc65b41b3942e963f0","first_seen":"2026-07-08T11:41:18.301648Z","last_seen":"2026-07-08T11:41:18.301648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.877Z","timestamp":1783510851877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rain-betcasino.nz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553940\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-14T13:18:50.894097Z","times_seen":234317,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":25,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.880Z","timestamp":1783510851880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rain-betcasino.nz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553940\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-14T13:18:50.894097Z","times_seen":234317,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":33,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.516Z","timestamp":1783510851516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Jul 2026 11:40:51 GMT\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-07-14T13:16:42.482878Z","times_seen":13468,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":43,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.883Z","timestamp":1783510851883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rain-betcasino.nz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553940\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-14T13:18:50.894097Z","times_seen":234317,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":38,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/logo.svg","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.275Z","timestamp":1783510851275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"13ca-656036bf09f9c\"\r\npriority: u=3,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Tue, 07 Jul 2026 11:09:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKJBvasuHmh2uC8O5vYDeYxNiZf1hVyQXC6vPsWyDRK2T93gdJY1L7pOgHfvZeWBlfRfN1vPtBHBan4iDeVYHbmCSSeKbSUpHZMIytQM36H9N1Uan3ajJFrfb45M87CSCpxecA%3D%3D\"}]}\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a17ed1047b9456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5066,"size_decoded":2905,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (5026)","md5":"5be7a81d18a247c3a13737a8369b4f9c","sha1":"5a4650a9aae019169f9d02048ccdfeba1979492b","sha256":"f129f3ec11c44fd5d430d3e44d7b1bf7fcadca3e1244a2d894e31cb200c45dde","sha512":"cf34b0b77fb8f736f19dc125b00c39428d3642b3463c4e37af9e145bf57d70a5ab2ec6e2273a7783ef66d8696c7234d43d46b84266f488b682ee356fd46a1bfe","ssdeep":"96:+9JRXK3fHtH+VYxTPxs6LPUOkKvDV6u2lzX9Wb3fHtH+VYxTPxs6LPUOkKvDV6u4:+xXK3vtemEckMVMZ923vtemEckMVMZ9t","tlshash":"4ca12c7a53439094c8bca5d522cb955ccd3431cfa0638e2ce9b22d1952d1e83e639b79","first_seen":"2026-07-08T11:41:18.303377Z","last_seen":"2026-07-08T11:41:18.303377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/game_catalog/slots/mysterious_egypt.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.479Z","timestamp":1783510851479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/game_catalog/slots/mysterious_egypt.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:13 GMT\r\netag: \"43a8-655b57bbe9b37\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FH9HKdiAuRT1aEoUeU0hovS2vxJOrKQwFmGlmvJiC%2BuJCrp9Uh734Qn40Z6iTUumlYpFjrJNKn0Zl07ESahVFDQZibGkvMkdI1lwISD1vSgivorq%2Fn9%2BKdoKaaYOAjMJjXqt2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17320,"size_decoded":18180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24888b5a9b9a5db18e043eb2aa850f15","sha1":"f7477530d3371d7c6f5ae9f6b452963125a96e48","sha256":"1945a1a213989f3b697dbbf409d090c047ffc4584191a89fab123e120eb79729","sha512":"07ad5a5fb1bc58bc3872015507a92ee134feb363d03c44f1f23b07786ad2b6bc91c1a1f30dcdb1d407219cecdd4acac3bf613959b900c34b49684b155f5a4e1c","ssdeep":"384:D+P76GN3RhnK+n5q2oJExtyvYuVUduPevVjPECi+er6:D+mGV7nXoJEsYuV2vBECi+eO","tlshash":"be72c06b82cfe240bdd8995a3a416994851d7148adf811b8dd5fef08fd084bb2f3d640","first_seen":"2026-07-08T11:41:18.30458Z","last_seen":"2026-07-08T11:41:18.30458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/favicon.png","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.707Z","timestamp":1783510851707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:04 GMT\r\netag: \"418-655b57b2ab932\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqj%2BcflKvEk%2BLKFQJI4tfwfFW3%2BK9%2FUcO5LWZhMYYY76Hk1P4rlkAsyD%2FwGMraCjT%2FP7edCADmGqsdGGD3G6zRaWtBAuq4rVUC9jozs14%2F%2BG74VsMxHS7DOjcIjtkuLMWLIAdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed1072bae56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":1944,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"4c03263c2f117ce2ed272d56d8f4e7c1","sha1":"01bfc5ed64d1a911a5d152bf6d1c54b1fab54ed5","sha256":"64ff1535b8be3641d1bfaa46ce5ec9553caa1b550d03ac4e0db0e36f308a6204","sha512":"df2129d2cc9b5e4e60d20eb0ad83fadb7e9ea38827153a7c3b0b695644967bd66ec161efd05030f73ab6a4994c9bc99d1fbea6bee113da1dec59a79658dfe989","ssdeep":"","tlshash":"591175d72953db6ee8dd6a2e41ff0265ca780a300088bd1c66ee58e74189352195802a","first_seen":"2026-07-08T11:41:18.305818Z","last_seen":"2026-07-08T11:41:18.305818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.875Z","timestamp":1783510851875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rain-betcasino.nz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553940\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-14T13:18:50.894097Z","times_seen":234317,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":19,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/css/bulma.min.css","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.274Z","timestamp":1783510851274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /css/bulma.min.css HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:03 GMT\r\netag: \"329c6-655b57b254ab6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUNYAh3nsvuOsSgnXgeAt8%2BsXVtMqSzLVxniX51Gv4tp%2BdnndayHJgAm7hhur%2FiWg4o9L%2FU4wOexy33eXJ25cqPczdg%2FeY5MTfVjbJJ%2FTMDMEdnf7aKJo3qFFNy73suj7GSsGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed1047b9356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207302,"size_decoded":28532,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"604205736eda4815fc08e1dcda46d3fc","sha1":"9cbf8fd27f50a6a27dec9c66081a520569c679a4","sha256":"ad3a5d3b41d7042369ade00772eead0763e9839d79568fb91ad612b2734bcfef","sha512":"1eac4752424cd1261c6efc54c393fad12cdd393cbf415c00d4926bbda5c9bf8abb9666c36429996aacf4d543ce690bdea317d846fd6d1e8cd618f31cb9306ebd","ssdeep":"768:tZHa2YfD0HK3E4QMMJNdz6CPry05DEJa09DKMzsRLcB73yMBgDFlWxG2A3UaQS+T:9lAe5hFC","tlshash":"f1149992ee503c4f7513882e54d0f7a4272e59c4da1627b7b537b2e0864a78f2937f0a","first_seen":"2023-04-26T18:39:59Z","last_seen":"2026-07-12T16:52:30.838386Z","times_seen":2632,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/banner.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.472Z","timestamp":1783510851472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/banner.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:06 GMT\r\netag: \"ad78-655b57b51b9f8\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7laE79q1TEvtWmP6RgSukCHn1wnlYH%2Fmv4jLM%2BupV3Ocj37A%2FIzdBYE8ADRwj0uDjyYJ1TSPybxuJIvFeu%2ByM5vgkmXP8Q3sGDZT1oaMKUUv5S8OBQ%2FrwTFqZnSXaDmfC3Ihg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44408,"size_decoded":45272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f996a9eb2b0f687c07ae3f62f34039ce","sha1":"a7484f840dd325a64d423d29f76d1124411093b3","sha256":"35525cb9e2f18b1315780d430c702134301959d38c3a624084ff3fe31fdf032e","sha512":"061c7a996d2ccf5a514a0ac7078247f844d4426ee4f31c3c6e40a3f3e9bf6212ce4dde67e874429ce6f393aa6a448138df85ce3b34fbfe953aa312a26b8a5779","ssdeep":"768:+++SCVH0LDkAJqmFdub9bii39ZB4UNHoXZsGCcjcxN1luhC1+91c8+G:+++S2IgAomF4b1x/BNaLCociM1Si8F","tlshash":"b2130264fde9462307989df6a118aff809fc199938eb507233ec86c650e5c8d6c5c26f","first_seen":"2026-07-08T11:41:18.307488Z","last_seen":"2026-07-08T11:41:18.307488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/game_catalog/slots/oceans_treasure.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.473Z","timestamp":1783510851473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/game_catalog/slots/oceans_treasure.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:09 GMT\r\netag: \"3e02-655b57b828df1\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxtPgtGz7t%2BW%2FDEn7O7AVJkgeoq5XjfpB%2BdEeO7l21qBftBadTbRE%2FdGsmDsPpDReU%2F5jYhZAeTXeKxiAGnWPN82wqc9PlK51njdoEhZIQvHN6CdhpECpGMelogldpfjFLWsxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15874\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15874,"size_decoded":16740,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"951b73443443528b6e21267df6a867f3","sha1":"8530289b3f07d30bca08a4257c51f349d107391e","sha256":"877d0f9a49f823fdedef2c80c2935c6eb432531bf1497916207a67c6d36bb33e","sha512":"019677e03f414e1d37782f7fa0a3028caa42e73e1ab8c9c8184696343f1e807bb94fa5029eed51a7a8a1e8a47b512e3ff53eb1c1a89bf667af1ef43651214774","ssdeep":"384:zt10wRPqza6ARd7P4eTTiKPQrgUGDvS5W3vZ:zt5cmj7Lv5PsX8fZ","tlshash":"0962d00f2222d4aac754c85d9b87067ef71249bb20b923ba1d82e2344a1ae5cfd5257d","first_seen":"2026-07-08T11:41:18.308544Z","last_seen":"2026-07-08T11:41:18.308544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/game_catalog/slots/diamond_strike.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.476Z","timestamp":1783510851476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/game_catalog/slots/diamond_strike.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:11 GMT\r\netag: \"45c8-655b57b9ca7cf\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5fsMu2Jyx%2BQkjdiP3tOZWl%2FRmRsiiUfCY05h3YwgP4yAmiCUVrVlW%2F3X8a1WZjcEDdpTANuXiFIdTB9E42Dm9M2jn3JTb6XDlWsT1JJuHapnRBATcXCTrJOhc7CDbD8idlTAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba556a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17864,"size_decoded":18724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ce384a48eec9331b91242ffba3ae42c","sha1":"da5bfd4ec87416bc05e21c2315b03362a0ecd38b","sha256":"0fb6698452c592cd8ba75298cf527ebdf7e3360e478e18b64ccc7bec412ee3df","sha512":"6ba8cd295a9f9dd3c5910d0fc1c539a37ed6987992d51981f57a78a0395fb23ad9a83ccf0236f86ccfa7cc9d4c875a8b77f6f7f117ba29267a78a366a7945be0","ssdeep":"384:lgqCuG3DmLaTqazdzPNwcssJdCio3RDM1M/LTK4tUr492HTwnbUSul0e:l3CvaQzJzPthoFc0TK4tU0lbnhe","tlshash":"8a82d08c41b686a558f75b8723af3d2aa5843cf442f573d44c0cde19256b40057f3b63","first_seen":"2026-07-08T11:41:18.309948Z","last_seen":"2026-07-08T11:41:18.309948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rain-betcasino.nz/images/game_catalog/slots/route_777.webp","fqdn":"rain-betcasino.nz","domain":"rain-betcasino.nz","tld":"nz"},"ip":{"addr":"172.67.159.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rain-betcasino.nz/","date":"2026-07-08T11:40:51.478Z","timestamp":1783510851478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rain-betcasino.nz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:30:05 GMT","end":"Mon, 28 Sep 2026 13:28:28 GMT"},"fingerprint":{"sha1":"81:C2:03:E7:81:ED:73:9C:7B:9C:FB:C5:90:8B:3E:AF:3D:9F:6A:E8","sha256":"94:54:E2:CB:A4:C9:D5:56:C0:92:B9:01:7E:99:BE:03:B0:F0:60:87:DC:A4:7F:89:01:50:94:C3:E4:C9:46:68"}}},"request":{"raw":"GET /images/game_catalog/slots/route_777.webp HTTP/1.1\r\nHost: rain-betcasino.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rain-betcasino.nz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:40:51 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Fri, 03 Jul 2026 14:10:12 GMT\r\netag: \"3544-655b57baa2a11\"\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Jul 2026 11:40:51 GMT\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qu9lXKObHHAEJaZPULUOuGets19eX%2FFBrX8YybcPXDFasdzZ1IBoboYTnIpUYg5UZPFb2jY2dvwtWBNQhT8RDBfC8tD8Jvp9jE4l85h6KHnObLdnlNVTWz%2Fm632MSbeopn6Scw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a17ed105bba656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13636,"size_decoded":14494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b931ddae03bff266430204e0342fdb7","sha1":"659b04964da856158de135b4d2ffe2e783e23cca","sha256":"d4c84c8277b09531fade04742152784a21f9f92dc1578339d32c30029c3f4add","sha512":"bd478a2e785d305322e0617883d7350e9e6f6341d7254ef8b97ba32580b430d8d6fdcff8b831c0d84b13471e576a8ebc5269136428bc15a358da7a8631ec68f4","ssdeep":"384:J7cWZc3BNl4VHVVFPJ5X3DU4MCp1lO+dvhIPEBIod:J73wH8Vf53MkO+dZKE3","tlshash":"2652e1cb6ca35ae0b63f46d9929bb419f2cf1d939689bce323f60a10d42501fc274568","first_seen":"2026-07-08T11:41:18.311017Z","last_seen":"2026-07-08T11:41:18.311017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rain-betcasino.nz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}