{"report_id":"ba2f948d-7a44-4d12-8ad8-01905842e2e2","version":0,"status":"done","tags":[],"date":"2026-07-17T09:44:18Z","url":{"schema":"http","addr":"us-rainbet.com","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"title":"RainBet Games \u0026 Live Casino - $20,000 Weekly Raffle","dom":{"size":31397,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2096)","md5":"0812e8ca46cc99b655e1c96a9d8e458f","sha1":"11709c2e8ced5428ce9881b367a8d6f7858698a6","sha256":"3798511483b4c26c9b10746b11bd6479bd1fc7e58c03fe545462a18335436500","sha512":"350f3cb0e45bbdd975799b851872516deca3711987511de9b88b4125b25955f1eb892a90724cac7af0e4ab928c20c6d2459e6a8e85f95598e2fc7951222dc45b","ssdeep":"768:OMFrNsF38dFHPpKWuuuox+Vf4cUF+//5rzVm0OeI:OMFrNsF38dFHPpKWuuufVwcUU//FRmBH","tlshash":"79e2106490a45917029361f4321f370a1defa85ba213ca287afec65d2fe6e41c93f478","dom_hash":"domhashb2a3261959d621b52fd9b520a0492097","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us-rainbet.com","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":0,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:44:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"us-rainbet.com","ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-07-16T11:21:19.492416Z","last_seen":"2026-07-16T11:21:19.492416Z","alert_count":54,"request_count":27,"received_data":3352758,"sent_data":13372,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":10,"received_data":414078,"sent_data":5604,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":3,"received_data":118707,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-12T22:30:28.701059Z","alert_count":0,"request_count":1,"received_data":487950,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4ad00c106a90abc5101c14fc66edb46","sha1":"7a2ce5a8e929db5b1be925434440eddb095aaf8b","sha256":"48303848bfbe774d152ce829f5d66545bc5848e965374557e2ce81c090812611","sha512":"de6567c1086fe5d0f5acad2cf02c80592df147fd8cee17c6cc0711e655626740977972593bd76c45b077a237869e5919b8cd2789a08af3ee3046b91fe5dd6ab6","ssdeep":"","tlshash":"82e02baa1a71103092de609ae347b36435232013200e94c2bb4c8ead5f64777b0216ce","size":398,"data":"","first_seen":"2026-07-16T11:21:25.426025Z","last_seen":"2026-07-17T09:44:23.519276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b49864d6ed8f21c1c46d182605c8851","sha1":"e14bc15bb8d74ab29b473df6d575045852f7f2bb","sha256":"7b127eea74f2102f45d329370501b359671b6d4e07355d66ac4146e0dbe0f450","sha512":"97f9a12d1522be9a29b06df56457d92d7124eb06d0c8d41b818b95278f2b102800a2f0ced79625c79fe1103fbb2c75057f2f724dd30ea365f1d31d624000af96","ssdeep":"","tlshash":"7ec02b8c211b0c7141fb2700cf7fb600b002330898d4a931081963044d20e17f784860","size":149,"data":"","first_seen":"2026-07-16T11:21:25.428195Z","last_seen":"2026-07-17T09:44:23.520153Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bad7fd58383143cf8fb81efe156e21c","sha1":"e68913e24cfdc168a5fdbd5ddd66c2d351ddb3b0","sha256":"262cdfc111ce7bd6ffa760b88ac6037a3fc4fe746c7775486b6f8e92e0fc0426","sha512":"a06a5492c652bc3ab50a6ca16fefe2936d8982171665edb202d4bc4bdf7d417bdf2710750c4cc4389e6e706877974fe35bd076e15ab0ea91d1b21f5c428ef705","ssdeep":"","tlshash":"23f09e67547115300167f23dd3dfff1d35a3002f1041c5513a9d89861fd0d5925f1aca","size":486,"data":"","first_seen":"2026-07-16T11:21:25.430072Z","last_seen":"2026-07-17T09:44:23.521935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/bootstrap/js/bootstrap.bundle.min.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7fa17686513b88a88156095c97a855d","sha1":"fa4993eb7c53f63dac1c068a72b58b662ef25636","sha256":"1f5b2786bf4269770ef136c8ba791b3d6a3fad166bcce632b9d5d21405947107","sha512":"a2485a002362b13a9ac86b3c56f4b1916278fae94669e16c2b7baf99f1a274bcc2c1f8d58e77b061105ad51f748f6b22583ee644c3ee6bbd04fb9ac827d2c101","ssdeep":"1536:6BPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkV:ZOANBZVVY","tlshash":"7573c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","size":78704,"data":"","first_seen":"2023-03-13T16:38:44Z","last_seen":"2026-07-18T04:04:56.975502Z","times_seen":704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/ytplayer/index.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e05f7f7013f7c52c7d8dfd3031ef4166","sha1":"667d3013f29c0ff594aa29cd140c06ddc4d75a42","sha256":"e9985fe9f31e8bccd93d3e3a99f90c8a5e073d7c64c4b3e68a71e18336be8ade","sha512":"96c48671a64053220b6ff7a3f6f63d45db02fda632ed06907109b4175a9b53795720c75d27d556d4070533975edf2ceb150abce7abb3a4a8d2e7e1abb3b886b4","ssdeep":"384:2jNgCEc13GcDRsTJfScj1m6tvPZbzE+qBRR3as:ePR13fDRsNacj1m6tvPZbzE+qBRR3as","tlshash":"5cc263c93575b56b4226a092d16b1213627ec07dd1088f6cf520acec6aeee54c27bf3d","size":27866,"data":"","first_seen":"2024-03-10T17:53:02Z","last_seen":"2026-07-17T09:44:23.508067Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/theme/js/script.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0fb633f7fe08419356a95664b8e92a6","sha1":"b67d751aa017f9614b159967f0e43b3bf219eb3f","sha256":"46530ae98e0b13696130f9af6941968d32d20d35c6b21d712bf7fd9b014f916e","sha512":"ed59f58628fa50346aca4622d7ca26d3716be93cbb07d838dcccd9a13f6322e10ebd4af9befbe8ef17734813f33c1602e8da6a0062212135d692ee34a0d8c6f8","ssdeep":"768:feWWMAMnpYFzT9C1uTUKQV2UTp64/7vMisBwlF8ZllakvzHr8cVujAK:fSFXTrQ2UTpBvWzbvO","tlshash":"2af2a4783221307648bb37b392af77c9757560aaea414461507dc8ec2e7ccc616b6ef8","size":34316,"data":"","first_seen":"2025-08-04T00:39:02.342245Z","last_seen":"2026-07-17T09:44:23.51301Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-18T08:37:10.119638Z","times_seen":182858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/smoothscroll/smooth-scroll.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a0a7b791595ef13b030c4a0632c723","sha1":"5b0ef559619ae76e226059afbd65803f9fb619a2","sha256":"ed87d4dcc8364407804ffe0cfd3656782060cbe49aea04a83f3e5eb709ee4e5f","sha512":"156ed8f4ac83642e5449c222254dbbb6fe3c21c303eea0be0ddc7796cdab164db83bf67e5c47f60fa618b07bc28383e63adaf1cbbc7e5c4eb35da98a20388356","ssdeep":"192:9GLpXuanX74gEmrIf3CsrDyzyfVdBoD0OO7RGpJlKu:9GLp++7EmrJytd6AJ7RGZKu","tlshash":"44f1eb587f42a0b0e19893bbb2afd30672704112f1479c65a229dca4bd54ef7d277e8c","size":7548,"data":"","first_seen":"2023-03-07T12:04:28Z","last_seen":"2026-07-18T04:04:56.996962Z","times_seen":1965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/dropdown/js/navbar-dropdown.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"791fa31552fc28004910071d482feb8d","sha1":"363826de3e742ae4cc79f8b5b942e72b43376f12","sha256":"a703931258f7fe5e64111d4a519b2fc6f3f71b72e1994dbeadf7e6aa6e4b2a98","sha512":"0408861cc7c827fa861b767409a73b2b959f9f3bee19286a33c4c9db41f94145b68e35c5ff7887096416a1df98fb3c9f38c2b973a0386e0f2c2832f4ecab4dbf","ssdeep":"","tlshash":"d07111f8a4a075b500bb25e962ff1787bf6520baf8495032113fc9cd2b6498105b6ff9","size":3595,"data":"","first_seen":"2023-08-29T04:36:16Z","last_seen":"2026-07-18T04:04:57.001701Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSXJCP6V8D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f497cdeb4d9cfb299d07030756f72cb6","sha1":"15114b2d0eccff0e939e09ee4514cf52ae70269d","sha256":"65797e54246ba3c2009142aca18f56e0538f1e544b67dc60a3358a558c7a0f99","sha512":"d04bd6954c384295f9ce99f144bb544d909ebf9353c4b91f4ec6fe51c180531248934d8a1210954a9b8176929e8631e07db6edb0cd0c396feb3830cb6854a08f","ssdeep":"6144:foDXBrSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:fgX9JDaBZwn+Iac","tlshash":"f3a4f8cdb3d674265396f478903f018ba57b29e2b44cc899b189cce02e7469a8177f7c","size":487346,"data":"","first_seen":"2026-07-17T09:44:23.507219Z","last_seen":"2026-07-17T09:44:23.507219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us-rainbet.com/assets/bootstrap/css/bootstrap-grid.min.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.821Z","timestamp":1784281428821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap-grid.min.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:48 GMT\r\nvary: accept-encoding\r\netag: W/\"69971790-c901\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":51457,"size_decoded":4709,"mime_type":"text/css","magic":"ASCII text, with very long lines (51237), with CRLF line terminators","md5":"e86be8e37fb82ff90609635fe463480a","sha1":"19c6c289e3f90d85a006bcbe93ea03c5c54dbd4e","sha256":"d6ff3ab96f11402936c592b12be8923d65e855578b5ad831fa8e6e3e825a2282","sha512":"15100b4f30a8a1a2cc58c072301a75af650f6656c0c0c5ebc002e772be40c13dddb269ecb0d7d1ac250c1e87e215f6533c1c0033be4fe6f605b2cf054c148037","ssdeep":"384:ZnlptoYKwtdymx/G1NfCpz600I4Lh7Gzcj:ZnlptoYKwtQmx/G1NfCpz600I4gcj","tlshash":"c03398c7f9d2284cc592c245d0927bbc4cbf9949a392ec9ba0177fba4b457c708a2d4d","first_seen":"2023-05-17T09:24:31Z","last_seen":"2026-07-17T09:44:23.497155Z","times_seen":620,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/theme/css/style.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.837Z","timestamp":1784281428837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/theme/css/style.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:32 GMT\r\nvary: accept-encoding\r\netag: W/\"69971780-3995\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14741,"size_decoded":3725,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"04685011f1773c1291c6534634b3a2c3","sha1":"73f72b346ecdf43c3cb8eaaabede78f5c8170447","sha256":"2b3e5bb4c51677ed03d88dfda3d3175c4215cfad1d8f18f8384770f891f41df9","sha512":"31a7645bde34453b8269b621a97c2fad2e2cef2031843738569a77fbf3ff365e969e3af51abb99bcdaffeb45b9955f19500395bc0be57b1b1a10478b40b4a0f3","ssdeep":"192:wEaE2UK9sPl2YL2q1ZGP3+ddZDKBMyM1pf94oWdbxxEJ2fuIMQmGqWjx:wEaaKIjJONBapFkxWujx","tlshash":"fe62519666f11e00301b985825d7b7a4773cd4429a0fcdbdaae3345cdf8a2d501b2f9e","first_seen":"2023-12-09T02:55:49Z","last_seen":"2026-07-17T09:44:23.497602Z","times_seen":244,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.505Z","timestamp":1784281429505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Jul 2026 18:06:39 GMT\r\nexpires: Sat, 10 Jul 2027 18:06:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574630\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-18T08:40:29.928106Z","times_seen":539190,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.507Z","timestamp":1784281429507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Jul 2026 18:06:39 GMT\r\nexpires: Sat, 10 Jul 2027 18:06:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574630\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-18T08:40:29.928106Z","times_seen":539190,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.510Z","timestamp":1784281429510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:44:19 GMT\r\nexpires: Mon, 12 Jul 2027 12:44:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 421170\r\nlast-modified: Wed, 10 Sep 2025 17:03:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17248,"size_decoded":18061,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17248, version 1.0","md5":"777d741345ba899c7c01afbe40540f5f","sha1":"5261de59dfafc3adcebfcf39de4d2b03a8c5c458","sha256":"2df52199eac56e2ec7a735e609bb151bdab79422c3e73948f4b6580c66bb5a50","sha512":"65ba9bca87dc14dfdc88a62da1842f10fd062d723687905ec3801a5b74ebc7d39b9cbf5548980b3fee7f2ae6e2dc12c9421a17c7a47bc704f477f7152105a932","ssdeep":"384:AINGaxRZx7ed4az+Zc+Vs6CQ3JRkN0z1hF1a7VDqWBAgmMx+ZsHk+o8a:AIN777JZB66CsG0z3FWNqdDMxu71","tlshash":"2672d151d702e63ca84011b982e6dc33e47b57caea5456131bc0ae1ffe733d252691db","first_seen":"2025-05-30T08:10:59.47292Z","last_seen":"2026-07-18T08:28:45.379378Z","times_seen":3592,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/socicon/fonts/socicon.woff2","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.369Z","timestamp":1784281429369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/socicon/fonts/socicon.woff2 HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/assets/socicon/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64764\r\nlast-modified: Thu, 19 Feb 2026 14:00:45 GMT\r\nvary: accept-encoding\r\netag: \"6997178d-fcfc\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":64764,"size_decoded":65116,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64764, version 1.0","md5":"e99c911274986f89b8311796b4246e86","sha1":"766dc474cf553d04f19ebac9f6b8ac99baca76e1","sha256":"519200c1e4c3221b1f8378484f4f6007aed674b9567205fc22b0ccc0d6a02612","sha512":"d6ccf0f36f15bd7d3cc0936653b7d0c6438a84de47619e04ff2e07445a43699f5934aa8e49324e00662ad87bb2af378e6c3bd1607ca47167e8c18bd104b7475b","ssdeep":"1536:aH0KUIlI3MfMy94u6MsxZG2r4jB/zdmacUXxjSIIu5/1DwUx8c5jxX:/IlI3MF947MsfG2r41/zdLDbjxuUjZ","tlshash":"fc5302ed32d34406a371e3e01983cac11ae58b91b65ef7f63015e2e5be7cd8217a6e44","first_seen":"2025-05-13T15:14:45.111096Z","last_seen":"2026-07-17T09:44:23.499201Z","times_seen":163,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.513Z","timestamp":1784281429513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:32:10 GMT\r\nexpires: Fri, 16 Jul 2027 02:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 112299\r\nlast-modified: Wed, 10 Sep 2025 17:07:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37788,"size_decoded":38601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37788, version 1.0","md5":"9577af3ccda5f49d71b0dea88b47f1ac","sha1":"fcfdbcb885ebabaf7354b134c44269942ae61698","sha256":"ddb8c66035104e233fc024669183aad3738b6daa16deee2ebb1241bd0f98ace1","sha512":"8f2256872c7a17c968039323f97a1646ff6bc682456621568a4c35f3f8780fa9237fe1c3192727f4f2e19d018bda5614bb197616b81e6ed87cc6683423e0650e","ssdeep":"768:+Ws2cEh6gcFObhrnUzM3jZdJIHnfwa5ZsXkyyIt:bt36FMyzMTZdJiwaXsJt","tlshash":"af0302bf85218f3e577b3d70c507af133c955938e92cea94e3126fa2ac432d90815693","first_seen":"2025-09-11T17:50:43.786734Z","last_seen":"2026-07-18T08:37:17.281252Z","times_seen":22674,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/iconsMind/fonts/icons-mind.woff?-rdmvgc","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.367Z","timestamp":1784281429367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/iconsMind/fonts/icons-mind.woff?-rdmvgc HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/assets/iconsMind/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 1177484\r\nlast-modified: Thu, 19 Feb 2026 14:00:39 GMT\r\nvary: accept-encoding\r\netag: \"69971787-11f78c\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1177484,"size_decoded":1177839,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 1177484, version 0.0","md5":"b8bd3cc74566655fac2616f136bf423b","sha1":"69f8e3bbacd66a297b9c2eb882eb6b0a11705e12","sha256":"cb8cd638435179683cbcdd35895e0de14db408e02d7960023f77c2035176761a","sha512":"463fd3adb7f5c7415b2c289ae4185f7560da6f3ba157bbed2ffa69dce7aa4faae75c3e9c4f794421acc4599256d90dc39982613c44643984651c4fda1aaa09a9","ssdeep":"12288:QweP6MoQND7YIEkyIT0/w5oXmlTFbZe7yK:7epFFyI4Rmtgj","tlshash":"8025e70b770deb4d904276e3c85df8635dd7a2015bb3a5527f8a9d0ce15e1e08a28b2f","first_seen":"2023-05-12T21:16:39Z","last_seen":"2026-07-18T07:31:54.170106Z","times_seen":764,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1871,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter+Tight:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.092Z","timestamp":1784281429092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Inter+Tight:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 09:43:49 GMT\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44739,"size_decoded":1986,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"01fa9ec0682b8df448e71242eda385b7","sha1":"30feb21b31f894888fcaef55b8946af8a3ca4266","sha256":"dfb5a2f7231b4b73b091107e814ccba822ae96e32eab0e77748dac1323d70a12","sha512":"b19a47a1a4da9a13ef393a489efd1464392da05f831f66178de70f1b18aa53f26b7ae92b787a2c27d915c6206c64b06a65d573e4c7d7f8c7f2fe6f38cd1c2047","ssdeep":"384:r3Cb3G3u36A3P3L343bXrtAs8ZIb0owAxFqlbdlrAu27WbKaWAT3E7brHZAQ4VcR:rc2eNfLtNLSWiD7","tlshash":"c613bda5001b99209b871dd363df7e23ae8e61687081c6795bfd08dcacdad27027cb4d","first_seen":"2025-09-17T06:31:13.18375Z","last_seen":"2026-07-18T07:19:25.693172Z","times_seen":1315,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/web/assets/mobirise-icons2/mobirise2.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.816Z","timestamp":1784281428816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/web/assets/mobirise-icons2/mobirise2.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:46 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178e-2205\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":8709,"size_decoded":1757,"mime_type":"text/css","magic":"ASCII text","md5":"f913bb3b156d13516c0ff37b577fc00f","sha1":"b7c73222d1eb5dcbfaac71b1ac625432ef051d83","sha256":"cdcbe8357cc75719dbb1b931f7f8b7690b94480814ee062742b0243a714b80e5","sha512":"176eae31b1c95136a6c43c5d2580edb568ec74a4d036d17b6a855f11dd4d7bf1c6fc2fe7422c99687555923e0c5b3a309a73ba32867c0ac379b41d9bc04ca39d","ssdeep":"96:4MaUzN0OrhlYVuOrMYGRiCqSy9VYfcPYf6IvCMYgi5tPk3uLPKrVQT/59:YwNPYV4YXCyzPVSdYgGtPkSPYVQL59","tlshash":"9b02e3d4f8be084013c1d8d523462aa0bf1d5326c64ebd59fa72798cb9c2ab4c5912fc","first_seen":"2023-04-12T04:16:50Z","last_seen":"2026-07-17T17:10:40.524668Z","times_seen":1952,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/images/4-2343x1075.png","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.130Z","timestamp":1784281429130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/images/4-2343x1075.png HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 123563\r\nlast-modified: Thu, 19 Feb 2026 14:00:47 GMT\r\nvary: accept-encoding\r\netag: \"6997178f-1e2ab\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":123563,"size_decoded":123916,"mime_type":"image/png","magic":"PNG image data, 2343 x 1075, 8-bit colormap, non-interlaced","md5":"8eb74bc5d5cbd92f6fff63e5de767007","sha1":"e913be12d86f491bbe426e102bf363b190e8d038","sha256":"01396fb3cdbe052a7af407fed6b6e36f8a0fe6553664fea164ec0f6bf4dd9d59","sha512":"80fb361c92d69070febad485264e1b83aac60dbeae9984b3dda1d53657111e0775cacc325ec59ea8bb7c2c7317d7360587cf56defa4f90ca8ab51dc84cf98223","ssdeep":"3072:8GANlg4//s3wRRemAEsHMvxHdPNUcD/ST8E:M/QLEsHMvxHB7D/S5","tlshash":"e6c30215c955e8e1f853813b0eb237dc4aba9581d847780a1e361ede9db33eacd2c948","first_seen":"2026-07-16T11:21:25.377091Z","last_seen":"2026-07-17T09:44:23.501728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/Material-Design-Icons/fonts/Material-Design-Icons.woff?3ocs8m","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.378Z","timestamp":1784281429378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/Material-Design-Icons/fonts/Material-Design-Icons.woff?3ocs8m HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/assets/Material-Design-Icons/css/material.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 101968\r\nlast-modified: Thu, 19 Feb 2026 14:00:38 GMT\r\nvary: accept-encoding\r\netag: \"69971786-18e50\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":101968,"size_decoded":102321,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 101968, version 1.5","md5":"4c874dce20349e350c4aefa6474221c1","sha1":"ee77184556f7b66fcb8ee9496f81ac62f792d7dc","sha256":"be00e19b662046cb8f2eb6eb86e4689edeefb0c003f6a215df9c22f0e15e16ad","sha512":"d480833712c1404526c372d8531200b7d305d7d5914c90ca5b0f5c30b648c4bd7b669f254cfe9f34000f50b7bd1d6b7c2922386c72905c8b6ae27592e25f779e","ssdeep":"3072:fq30h5HeTxM7jXSbREAX9QRSN61c1/QBEEq8he7VjlXUuARY4SLyOdPA9xUzocx:fq30h5HeTxM7rSbREAX9OSN61c1/QBE+","tlshash":"cca33a27e387ed29ed0a9b3d0426939119edd8ac3517838329c54da79f0f4f6a9cc6c4","first_seen":"2023-05-03T20:50:11Z","last_seen":"2026-07-17T09:44:23.502881Z","times_seen":1065,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":170,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.513Z","timestamp":1784281429513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 07:14:56 GMT\r\nexpires: Wed, 14 Jul 2027 07:14:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 268133\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-07-18T07:34:37.958467Z","times_seen":12439,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/bootstrap/css/bootstrap-reboot.min.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.822Z","timestamp":1784281428822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap-reboot.min.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:48 GMT\r\nvary: accept-encoding\r\netag: W/\"69971790-120f\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4623,"size_decoded":1937,"mime_type":"text/css","magic":"ASCII text, with very long lines (4291), with CRLF line terminators","md5":"a5751a065a1c7de997f17a0f903ee683","sha1":"14f45fb12ea762a6d9c59f236e112b9e55496b4b","sha256":"d719b96b854f711f490a090cd89bc3e178999c6d15e6b86f6453ae4280cbbfb3","sha512":"99f670d987b80ce1f156695acd298972d34c883692dbac16b08538bd2149df93b65dd2eb6c86710417d814bb5ca679e59111de84f774aa65638702d864885808","ssdeep":"48:O6QKdnl9SRCxJTE36XdLyTfvvn8lcy0aW+jfO0oD0z8KQbHtpxstoDXRxlQsX40j:vl9SgrU6XdWIGO5oDHKQbZsSBXQsLFF","tlshash":"8291b75ba7003168ed7b4ca6328ea2d573141933c4b297b5d0239e68cfcb5b31356b1e","first_seen":"2023-08-29T20:15:55Z","last_seen":"2026-07-17T09:44:23.503921Z","times_seen":605,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.376Z","timestamp":1784281429376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 03:14:20 GMT\r\nexpires: Fri, 16 Jul 2027 03:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 109769\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-07-18T08:36:29.996345Z","times_seen":6859,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":4,"dns":0,"connect":32,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:43:48.052Z","timestamp":1784281428052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 06 Jul 2026 08:57:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4b6df9-6b6a\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":27498,"size_decoded":5902,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2097)","md5":"1b1d7e551d288c091963fda11589cf7c","sha1":"e6d6a49f77a34bc3e479d3d9c2f753f4955cfe61","sha256":"8ca67e498d187c187ba0f4b52f9ffb767269f1d497e4f1b529ef175d881baaee","sha512":"f61d8643aafa8c5a1edaea41fdd04c4a7099835feb535c071f6368249cfc19ee91062c0a510a32adcd60ebd81fadb28e547d49325c0457985a609b90f938443d","ssdeep":"768:D0FrNsF38dFHEFruuuoZoflcULhrMvkeP:D0FrNsF38dFHEFruuu3dcUxveP","tlshash":"e0c2b9a550f82623018392e8361a3b096ebe945bd616ca6c75ffc7681fdaf05c833c5d","first_seen":"2026-07-16T11:21:25.423505Z","last_seen":"2026-07-17T09:44:23.50492Z","times_seen":2,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":80,"connect":106,"send":0,"wait":110,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/socicon/css/styles.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.835Z","timestamp":1784281428835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/socicon/css/styles.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:45 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178d-40b5\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":16565,"size_decoded":3104,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"97d1bfe0306d8d7afc6f87f6da6a6773","sha1":"9bc1f0ce4654d3160ab871cd7dd8a8f001e5edea","sha256":"5c6011a2731d76063ae41723bd5d720b99eca988937a9a50772637e25204ab85","sha512":"3a80aad58c965c26ceb20b8d35d1d61e56359cf087740351c4a57f6f9df2072e153c2110b1b6e820ed08affc477466910d47fed118e7f6258074d68b81f21935","ssdeep":"192:wSN3c/gfzLzBK5qtsTIhIoBOFWxYiVQsjrmk7IxCS9/10l2dUANJAV1FcBKWaWhU:d3NfzLI5UbNsux5FcTRe","tlshash":"dc72e4fc957d84805f20d991a3f26aa22b9d92b4cf8e9d25f2067dcc55f3290508bedc","first_seen":"2025-06-28T09:33:19.73117Z","last_seen":"2026-07-17T09:44:23.506194Z","times_seen":181,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSXJCP6V8D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.099Z","timestamp":1784281429099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=G-VSXJCP6V8D HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\nexpires: Fri, 17 Jul 2026 09:43:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166200\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":487346,"size_decoded":166804,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"f497cdeb4d9cfb299d07030756f72cb6","sha1":"15114b2d0eccff0e939e09ee4514cf52ae70269d","sha256":"65797e54246ba3c2009142aca18f56e0538f1e544b67dc60a3358a558c7a0f99","sha512":"d04bd6954c384295f9ce99f144bb544d909ebf9353c4b91f4ec6fe51c180531248934d8a1210954a9b8176929e8631e07db6edb0cd0c396feb3830cb6854a08f","ssdeep":"6144:foDXBrSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:fgX9JDaBZwn+Iac","tlshash":"f3a4f8cdb3d674265396f478903f018ba57b29e2b44cc899b189cce02e7469a8177f7c","first_seen":"2026-07-17T09:44:23.507219Z","last_seen":"2026-07-17T09:44:23.507219Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":41,"receive":46,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/ytplayer/index.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.105Z","timestamp":1784281429105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/ytplayer/index.js HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Feb 2026 14:00:34 GMT\r\nvary: accept-encoding\r\netag: W/\"69971782-6cda\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":27866,"size_decoded":6387,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"e05f7f7013f7c52c7d8dfd3031ef4166","sha1":"667d3013f29c0ff594aa29cd140c06ddc4d75a42","sha256":"e9985fe9f31e8bccd93d3e3a99f90c8a5e073d7c64c4b3e68a71e18336be8ade","sha512":"96c48671a64053220b6ff7a3f6f63d45db02fda632ed06907109b4175a9b53795720c75d27d556d4070533975edf2ceb150abce7abb3a4a8d2e7e1abb3b886b4","ssdeep":"384:2jNgCEc13GcDRsTJfScj1m6tvPZbzE+qBRR3as:ePR13fDRsNacj1m6tvPZbzE+qBRR3as","tlshash":"5cc263c93575b56b4226a092d16b1213627ec07dd1088f6cf520acec6aeee54c27bf3d","first_seen":"2024-03-10T17:53:02Z","last_seen":"2026-07-17T09:44:23.508067Z","times_seen":124,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/dropdown/js/navbar-dropdown.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.106Z","timestamp":1784281429106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/dropdown/js/navbar-dropdown.js HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Feb 2026 14:00:49 GMT\r\nvary: accept-encoding\r\netag: W/\"69971791-e0b\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3595,"size_decoded":1527,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (519)","md5":"791fa31552fc28004910071d482feb8d","sha1":"363826de3e742ae4cc79f8b5b942e72b43376f12","sha256":"a703931258f7fe5e64111d4a519b2fc6f3f71b72e1994dbeadf7e6aa6e4b2a98","sha512":"0408861cc7c827fa861b767409a73b2b959f9f3bee19286a33c4c9db41f94145b68e35c5ff7887096416a1df98fb3c9f38c2b973a0386e0f2c2832f4ecab4dbf","ssdeep":"","tlshash":"d07111f8a4a075b500bb25e962ff1787bf6520baf8495032113fc9cd2b6498105b6ff9","first_seen":"2023-08-29T04:36:16Z","last_seen":"2026-07-18T04:04:57.001701Z","times_seen":576,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.511Z","timestamp":1784281429511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 04:55:04 GMT\r\nexpires: Fri, 16 Jul 2027 04:55:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 103725\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39580,"size_decoded":40393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-07-18T07:42:46.690944Z","times_seen":232571,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/images/rainbet-logo.svg","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.994Z","timestamp":1784281429994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/images/rainbet-logo.svg HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nCookie: _ga_VSXJCP6V8D=GS2.1.s1784281429$o1$g0$t1784281429$j60$l0$h0; _ga=GA1.1.160564150.1784281430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 14:00:47 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178f-1d38\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:50 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7480,"size_decoded":3492,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3722843dd62574a69a7ff815395927c7","sha1":"d06d8164e20bb17d11abb216033705d78b856bd3","sha256":"829f5f41f66e7796f118dcb9c41c30423ecac34846a6e8d81c7273e54a3ce4cf","sha512":"3dbe860be6787fd0b0e1082d5b125dd433b40f5b7ebc7b9133259dbc3c1b482a3e28b5eb825ec029ed4fa6094c16618759adca11194f8eb99968acb0e2d1c030","ssdeep":"192:tYUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tGXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"79f194ce3bb09ef88d75cbd2ff1320697a17c07b59848e20e1595f0d2a9081cde95d8a","first_seen":"2025-12-01T11:28:00.242862Z","last_seen":"2026-07-17T10:04:37.502513Z","times_seen":52,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/mobirise/css/mbr-additional.css?v=4hg1x9","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.098Z","timestamp":1784281429098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/mobirise/css/mbr-additional.css?v=4hg1x9 HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:48 GMT\r\nvary: accept-encoding\r\netag: W/\"69971790-40859\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":264281,"size_decoded":13266,"mime_type":"text/css","magic":"ASCII text, with very long lines (522)","md5":"d2d552888c5c39f972b79dcf49550df0","sha1":"f17137fc1adb377ee437b428bc2b29a5c6d375bd","sha256":"6a0475c30efefb557e2bcc45f9cb7fd68e843883f7efd39d10f4d6cdacae1a1a","sha512":"6e56100ef54755cadaffa636e3d2a7b1b3a7f685b0425c52fc713e9a3bd1d73ae3333c7c440adcd6f797b6f5b4180c82d05173adde55e0ca50441f2ae4947a40","ssdeep":"1536:Pk+MgZC9XgZCSXgZCI1xn/nWs/ywva9zc1Yp3EpS9HIZS9Jz3lyx1HPcTIJqDtRc:Pk+MPmG9kn5IwLWFAA0LbDkH","tlshash":"ce443288b6e13d041063635914ee13b67b596041de0eed7fb5b322adbfca188447bf98","first_seen":"2026-07-16T11:21:25.343762Z","last_seen":"2026-07-17T09:44:23.51006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/bootstrap/js/bootstrap.bundle.min.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.102Z","timestamp":1784281429102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Feb 2026 14:00:48 GMT\r\nvary: accept-encoding\r\netag: W/\"69971790-13370\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":78704,"size_decoded":22002,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"a7fa17686513b88a88156095c97a855d","sha1":"fa4993eb7c53f63dac1c068a72b58b662ef25636","sha256":"1f5b2786bf4269770ef136c8ba791b3d6a3fad166bcce632b9d5d21405947107","sha512":"a2485a002362b13a9ac86b3c56f4b1916278fae94669e16c2b7baf99f1a274bcc2c1f8d58e77b061105ad51f748f6b22583ee644c3ee6bbd04fb9ac827d2c101","ssdeep":"1536:6BPTJR2t4PqiiyuL5FehgTr1voCBZx6wVlLBkV:ZOANBZVVY","tlshash":"7573c5493254b87309ee15a68037460bf7256d94b14b802cb5bdacde2b3dc8672b7f78","first_seen":"2023-03-13T16:38:44Z","last_seen":"2026-07-18T04:04:56.975502Z","times_seen":704,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.095Z","timestamp":1784281429095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 09:43:49 GMT\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":1776,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-07-18T07:19:25.741699Z","times_seen":13205,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":49,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lora:400,500,600,700,400i,500i,600i,700i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.096Z","timestamp":1784281429096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Lora:400,500,600,700,400i,500i,600i,700i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 09:43:49 GMT\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37144,"size_decoded":2634,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"98bd83a8991a598023680b1e0ff741fc","sha1":"08eda15d5bcdd99116b3110fcd74f39d61a62903","sha256":"c20bceaff1b660582b12334ca71d048c8cd2bab25efa21ade8be09ef941d1c65","sha512":"e3cb809631863beca439ce212dae7996188508576cb6ff7ee37253b7e11f0526740bfd0e03c796c58cfa10f18446e45ae20a29176cf86ef2c52846014b849ba4","ssdeep":"384:3QnRNQGqY42NOWbnO0QpqY42WxlGnn7QcqY42ngwpn0CQvqY42ITNE6qY4MAPqY6:evVopN1WbOcDIYst1","tlshash":"b9f211a100179504a75719d223ce7e7aee4e92587140d036abfd8b87feceda652a831c","first_seen":"2025-09-13T09:22:39.694321Z","last_seen":"2026-07-18T05:15:41.84628Z","times_seen":877,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/theme/js/script.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.107Z","timestamp":1784281429107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/theme/js/script.js HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Feb 2026 14:00:32 GMT\r\nvary: accept-encoding\r\netag: W/\"69971780-860c\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":34316,"size_decoded":9669,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (701)","md5":"f0fb633f7fe08419356a95664b8e92a6","sha1":"b67d751aa017f9614b159967f0e43b3bf219eb3f","sha256":"46530ae98e0b13696130f9af6941968d32d20d35c6b21d712bf7fd9b014f916e","sha512":"ed59f58628fa50346aca4622d7ca26d3716be93cbb07d838dcccd9a13f6322e10ebd4af9befbe8ef17734813f33c1602e8da6a0062212135d692ee34a0d8c6f8","ssdeep":"768:feWWMAMnpYFzT9C1uTUKQV2UTp64/7vMisBwlF8ZllakvzHr8cVujAK:fSFXTrQ2UTpBvWzbvO","tlshash":"2af2a4783221307648bb37b392af77c9757560aaea414461507dc8ec2e7ccc616b6ef8","first_seen":"2025-08-04T00:39:02.342245Z","last_seen":"2026-07-17T09:44:23.51301Z","times_seen":114,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/images/2-2449x1505.png","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.131Z","timestamp":1784281429131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/images/2-2449x1505.png HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 613248\r\nlast-modified: Thu, 19 Feb 2026 14:00:47 GMT\r\nvary: accept-encoding\r\netag: \"6997178f-95b80\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":613248,"size_decoded":613601,"mime_type":"image/png","magic":"PNG image data, 2449 x 1505, 8-bit colormap, non-interlaced","md5":"3066e781095321c82c83246363ed9152","sha1":"0a3ea5f758a8a63cbe3c89b586707c4e843c09f7","sha256":"53a1fd3e6abb4cd7a590284b55af50d9ae705c06c8398ead31469caa9fb0996d","sha512":"1a9bb38ac022cac033eb1f1e9b649594e4b436a9104a22de881cbc53105773f3397c0ff740d5804ebb4cc408b6e8c045196dae2877a4c4b5eed9ee071ac4cb16","ssdeep":"12288:LgZwDaI7nb2DyPCiJLSENaLxV7F7ogzHhKonb2SrVNG9mxaiUEgNK2QwEXmCOAN/:EyDaMnPC7EWpGobrVg9mIxEgN5QwpAN/","tlshash":"89d423e51bde15faf668b07dc631f210b914b96cb88fbcc4505d0639acf01298eda58b","first_seen":"2026-07-16T11:21:25.405866Z","last_seen":"2026-07-17T09:44:23.513546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":971,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.504Z","timestamp":1784281429504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Jul 2026 18:06:39 GMT\r\nexpires: Sat, 10 Jul 2027 18:06:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574630\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-18T08:40:29.928106Z","times_seen":539190,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.509Z","timestamp":1784281429509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:32:10 GMT\r\nexpires: Fri, 16 Jul 2027 02:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 112299\r\nlast-modified: Wed, 10 Sep 2025 17:07:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37788,"size_decoded":38601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37788, version 1.0","md5":"9577af3ccda5f49d71b0dea88b47f1ac","sha1":"fcfdbcb885ebabaf7354b134c44269942ae61698","sha256":"ddb8c66035104e233fc024669183aad3738b6daa16deee2ebb1241bd0f98ace1","sha512":"8f2256872c7a17c968039323f97a1646ff6bc682456621568a4c35f3f8780fa9237fe1c3192727f4f2e19d018bda5614bb197616b81e6ed87cc6683423e0650e","ssdeep":"768:+Ws2cEh6gcFObhrnUzM3jZdJIHnfwa5ZsXkyyIt:bt36FMyzMTZdJiwaXsJt","tlshash":"af0302bf85218f3e577b3d70c507af133c955938e92cea94e3126fa2ac432d90815693","first_seen":"2025-09-11T17:50:43.786734Z","last_seen":"2026-07-18T08:37:17.281252Z","times_seen":22674,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/animatecss/animate.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.828Z","timestamp":1784281428828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/animatecss/animate.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:44 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178c-1846d\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":99437,"size_decoded":5918,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"08617e3d544dde0b1097c07962037f32","sha1":"a5fecc4379c61efb99b82cefd7fd7dfc9d258720","sha256":"2500feeabee60bbc29ad9a16cdad209b910ef2835220db7270aa08c2821d100b","sha512":"034c9c8ec7172bab720e99ff113848b73ae25efdc238b12f7cccdb806a49461b89631689908d2b8c3a52d265958001402aab2a198a7f371a79959373e24dcbbb","ssdeep":"768:53fwSB9YjaO3FqMqE6H4YhW1H1lzUzr1v18HrHm:53fwSB9YjaO3FX/6H4Yhf","tlshash":"49a33c991881158447724f69d3de8e2ceb3da57318221eee73c2488f8fa6f5863cd947","first_seen":"2023-08-29T04:36:16Z","last_seen":"2026-07-17T09:44:23.514679Z","times_seen":169,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/popup-overlay-plugin/style.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.831Z","timestamp":1784281428831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/popup-overlay-plugin/style.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 70\r\nlast-modified: Thu, 19 Feb 2026 14:00:32 GMT\r\nvary: accept-encoding\r\netag: \"69971780-46\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":70,"size_decoded":415,"mime_type":"text/css","magic":"ASCII text","md5":"71638b172ac533e8c815a345431e8ac6","sha1":"b42c09faebc759d3013f0d038890b1180be542f5","sha256":"f94e3f5ba208e4ee6275fb60ad700da027b936fc41cc5035ceae8d5831d2bb9d","sha512":"e4d123082c775f0601f07a03a980e52c65eac6694b03475f0731236ec6ca301eeb6bbadee9e2a6cba8f8480bf18147da94fddffa1aacbe2396fc0b30e31ff888","ssdeep":"","tlshash":"e9a0220888e203000e8c03232cbb0f3b303f002388882b3c0c30238003830028c00a00","first_seen":"2023-04-12T12:15:23Z","last_seen":"2026-07-17T09:44:23.515173Z","times_seen":391,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/dropdown/css/style.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.833Z","timestamp":1784281428833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/dropdown/css/style.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:49 GMT\r\nvary: accept-encoding\r\netag: W/\"69971791-1f09\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7945,"size_decoded":1849,"mime_type":"text/css","magic":"ASCII text","md5":"55bf276f73ef7c88f98c8a79e9a42488","sha1":"95644d658c5a473118c08894b9c469491a3a51fc","sha256":"180d8ca6812f97d5ef73a4fbc28c018bc1c3d9af25a174af4452b997b513a7f5","sha512":"f08cff2d231eaa821bb6667fb20c568f1ce06ed9f5ac4878a690fa51482ad034dbd0df2c17efc6898cc890c3d545d006fc2368cd15a5be049d3a94f691fd33f6","ssdeep":"192:4unJepSzgKLsguryPeGhVqyHzNrGyqni+/3AfYK/:q0Ff/1","tlshash":"4af1c296eaf23004205691dc97ff23856f27100bad0acc39b67b274eef871a425b5f59","first_seen":"2023-04-08T05:06:04Z","last_seen":"2026-07-18T04:04:57.051753Z","times_seen":2074,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/smoothscroll/smooth-scroll.js","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.103Z","timestamp":1784281429103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/smoothscroll/smooth-scroll.js HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 19 Feb 2026 14:00:49 GMT\r\nvary: accept-encoding\r\netag: W/\"69971791-1d7c\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7548,"size_decoded":3375,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (519)","md5":"23a0a7b791595ef13b030c4a0632c723","sha1":"5b0ef559619ae76e226059afbd65803f9fb619a2","sha256":"ed87d4dcc8364407804ffe0cfd3656782060cbe49aea04a83f3e5eb709ee4e5f","sha512":"156ed8f4ac83642e5449c222254dbbb6fe3c21c303eea0be0ddc7796cdab164db83bf67e5c47f60fa618b07bc28383e63adaf1cbbc7e5c4eb35da98a20388356","ssdeep":"192:9GLpXuanX74gEmrIf3CsrDyzyfVdBoD0OO7RGpJlKu:9GLp++7EmrJytd6AJ7RGZKu","tlshash":"44f1eb587f42a0b0e19893bbb2afd30672704112f1479c65a229dca4bd54ef7d277e8c","first_seen":"2023-03-07T12:04:28Z","last_seen":"2026-07-18T04:04:56.996962Z","times_seen":1965,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/images/rainbet-logo.svg","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.128Z","timestamp":1784281429128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/images/rainbet-logo.svg HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Feb 2026 14:00:47 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178f-1d38\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7480,"size_decoded":3492,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3722843dd62574a69a7ff815395927c7","sha1":"d06d8164e20bb17d11abb216033705d78b856bd3","sha256":"829f5f41f66e7796f118dcb9c41c30423ecac34846a6e8d81c7273e54a3ce4cf","sha512":"3dbe860be6787fd0b0e1082d5b125dd433b40f5b7ebc7b9133259dbc3c1b482a3e28b5eb825ec029ed4fa6094c16618759adca11194f8eb99968acb0e2d1c030","ssdeep":"192:tYUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tGXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"79f194ce3bb09ef88d75cbd2ff1320697a17c07b59848e20e1595f0d2a9081cde95d8a","first_seen":"2025-12-01T11:28:00.242862Z","last_seen":"2026-07-17T10:04:37.502513Z","times_seen":52,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/images/3-2430x1496.png","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.133Z","timestamp":1784281429133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/images/3-2430x1496.png HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 272024\r\nlast-modified: Thu, 19 Feb 2026 14:00:47 GMT\r\nvary: accept-encoding\r\netag: \"6997178f-42698\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":272024,"size_decoded":272377,"mime_type":"image/png","magic":"PNG image data, 2430 x 1496, 8-bit colormap, non-interlaced","md5":"f9573a9a85004980b60cbb77ea85c648","sha1":"fb5fc1e6c4724116456f89a057976a780f9f6643","sha256":"a136d1b356fa29a1b2a60d4fb69740ed279f5c6557892a6a4deb478531debac5","sha512":"db9bbc887138d9b918fac8a29da22594847fdc8089ff73dd3798ebb15bfe7a5a7be0c98f5b66823f61d12082a48e051a3bde5243f7223349e99763765509254d","ssdeep":"6144:GYz/PbA2YVAMWQ0OYDTG/XiQvmAI+yKwQV0oJ+DA1m2aUxBa6OdfchBtTy:pHbAVVAM2OYAyZAI+y1QKomA1m2aUxBy","tlshash":"7d4413e800307bcb5b36c91bd098539682a05cd7ca94fcba59cdb0dd68bac6c570b65f","first_seen":"2026-07-16T11:21:25.410082Z","last_seen":"2026-07-17T09:44:23.516491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.373Z","timestamp":1784281429373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/intertight/v9/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://us-rainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 03:14:20 GMT\r\nexpires: Fri, 16 Jul 2027 03:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 109769\r\nlast-modified: Mon, 15 Sep 2025 16:28:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44872,"size_decoded":45685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44872, version 1.0","md5":"f5af7a761c2b64f7c28f1e6721d7743b","sha1":"4179443c5359657e3c405662378f19b96112154c","sha256":"77fefe8ca19b9f69b5284832c519e0493127c1f091f0a8936884be7721c4e618","sha512":"89118c1ad40849d2684d32ddc4300681caedbc09d406a75aaedbbec06902f66ae8a23d2fb05e58cfd6a74d9e41481c94c874df18907cf4730c9e79242aa8388c","ssdeep":"768:pIbgboC/jX8ToguHZRHkJAHFCGNxHefy2BiO07nP/adgItMqmUu1ztZf3BbXsi:SgboAEcsAEGxHefy2BgaPMqf6Lf+i","tlshash":"3913f2f67f5c2bab97efb99eb8f90c1619d50a3091934c9e01941c1b6728f821d9d063","first_seen":"2025-06-03T20:24:39.584186Z","last_seen":"2026-07-18T08:36:29.996345Z","times_seen":6859,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/web/assets/mobirise-icons2/mobirise2.ttf?f2bix4","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:49.375Z","timestamp":1784281429375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/web/assets/mobirise-icons2/mobirise2.ttf?f2bix4 HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/assets/web/assets/mobirise-icons2/mobirise2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 25280\r\nlast-modified: Thu, 19 Feb 2026 14:00:46 GMT\r\nvary: accept-encoding\r\netag: \"6997178e-62c0\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:49 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":25280,"size_decoded":25646,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, mobirise-24px","md5":"a915592fd82d5a2f17cbbc795a6c31e8","sha1":"4c54f6ebbbcbe1340ad2f43ccfdf1aec5107aa86","sha256":"523854ac3552c34b23a5f0c6a2f49c6ba0b439a95848692aa24bc304ecd29784","sha512":"e4569f644c499601399eda0bd4bdc27248527f82e41960e7ee3ed7ae5ac6f1174bd8d17eca03a2318270e3aaf82b5f42c0acc1035c24e70f0efd20d6cf2ca105","ssdeep":"384:nvwLxZZHg0AfvyAn37flFWQJRHpaHKT4/9IFgR:nIL9aSA37frWoR1U93R","tlshash":"f5b20857e792d24ee927db750c6752621feed826c339d3da88cd1c90a81a8f90d34bc1","first_seen":"2023-04-13T20:25:40Z","last_seen":"2026-07-17T17:10:40.50793Z","times_seen":1854,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":156,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/iconsMind/style.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.814Z","timestamp":1784281428814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/iconsMind/style.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:32 GMT\r\nvary: accept-encoding\r\netag: W/\"69971780-18163\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":98659,"size_decoded":14195,"mime_type":"text/css","magic":"ASCII text","md5":"cb779cb681193346c0c7ba39bc975fd8","sha1":"25a7fd6c853293815b53f51d35427f2e67a059c8","sha256":"e22388271240a6c5345d8ea41978eb2b69446b1a5b78b4b3205894b1767f9423","sha512":"ceaa442476e3429e8a5498a70b8c39f9ebc2ed0d456eedd264e1a107923865722b899dec52c75d190e324ab8fb12d44af5c8b7284eef58c83da2785857b5c556","ssdeep":"768:oKEL2e+UpZz3IRcxxqBmoT+eXECiWC/B/:cpZz3IR80Bm46r","tlshash":"b0a3eca4dd4d3e962786f4d32b45fe045f1fe3298d092859e013bd2cb3c6215a6d23ea","first_seen":"2023-05-07T07:44:13Z","last_seen":"2026-07-17T09:44:23.517863Z","times_seen":109,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/Material-Design-Icons/css/material.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.818Z","timestamp":1784281428818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/Material-Design-Icons/css/material.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:44 GMT\r\nvary: accept-encoding\r\netag: W/\"6997178c-be91\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":48785,"size_decoded":7363,"mime_type":"text/css","magic":"ASCII text, with very long lines (311)","md5":"f7320f0637353b5588292da65dd81fe8","sha1":"8084ced9c1b76ff79d6d7732979215afe7bbee3e","sha256":"4a509c45713bc19d7a456a49081a7b625167cdf1cbff02baf4c2d6606eda5c9a","sha512":"fc8ff8348abd8c578aa4bb65e44299d65210115148550177f1bfd9cefd0ded2c94abde9ada99a48e5b90c5eb8a780de5c7c05e6c79642fa13c1a89cdaeb504e6","ssdeep":"768:RAl6XlJdN7MwPHY7GXomjtuKs+IUdzd3mxHdbSl0OrfufurEWEEnMZL4:Ri6X/7BPb","tlshash":"9d23ccf0e4bd1ca30717e0e1e6432664f71de669a90b6d58d2e27ccca5c3622e1932dd","first_seen":"2023-04-29T09:45:36Z","last_seen":"2026-07-17T09:44:23.518338Z","times_seen":990,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-rainbet.com/assets/bootstrap/css/bootstrap.min.css","fqdn":"us-rainbet.com","domain":"us-rainbet.com","tld":"com"},"ip":{"addr":"82.25.81.94","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://us-rainbet.com/","date":"2026-07-17T09:43:48.819Z","timestamp":1784281428819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-rainbet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 07:03:24 GMT","end":"Wed, 16 Sep 2026 07:03:23 GMT"},"fingerprint":{"sha1":"42:02:48:6B:CC:FD:7A:09:F8:96:A8:E0:30:1B:06:6B:88:B4:4B:1F","sha256":"95:CE:99:7E:0E:DF:B9:DC:69:92:96:6C:56:40:74:D0:B5:E6:15:C1:5F:C3:20:5C:F5:4F:42:27:84:FA:4A:1E"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: us-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-rainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: hws\r\ndate: Fri, 17 Jul 2026 09:43:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 14:00:48 GMT\r\nvary: accept-encoding\r\netag: W/\"69971790-25fc6\"\r\nplatform: hostinger\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Sat, 17 Jul 2027 09:43:48 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":155590,"size_decoded":20708,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65301), with CRLF line terminators","md5":"466cd60948b2af44e5aa3b76e213785c","sha1":"e55ae320b6807d0554195041185c25a152677ce5","sha256":"df10434082e8975fdd54cc5ae25af6b1b5c3d727545bfa705d3020e8efe51843","sha512":"e7cc643a514a7a45b205593cf033927d5e2067f649cb0d30da7aaf6ee4222fb085941f1023c07312d0dabe52eae6466c3a834d6b7b1b9aba49e050b8d78a4544","ssdeep":"1536:qtynW83RipVVsEBpy0cuJcf22RWt5CyVUpz600I4fT:qtynNyVUpz600I4fT","tlshash":"21e3a3d7f581241dd4a7c259a0d1bffd052f4686e3025eabb0277bb88b4a6c70963e4c","first_seen":"2023-08-29T04:36:16Z","last_seen":"2026-07-17T09:44:23.518794Z","times_seen":704,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"us-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}