{"report_id":"bc2fbc51-58c3-4ea7-a8ca-8869400a0c5c","version":0,"status":"done","tags":[],"date":"2026-07-28T16:36:37Z","url":{"schema":"http","addr":"rainbetonline-au.com","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"title":"Rainbet 🎰 Play 7000+ Casino Games in AU Today!","dom":{"size":80724,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5754)","md5":"4166b27c45676bf46f78fdc17ce4ea12","sha1":"8ba97ba633cb292b1ae1de464d535b9559f7ac75","sha256":"5edd1ee32171705b601780b219831a493507be0bc96785d54b35d2d61555847b","sha512":"b4f6f296ddcce8d45f8e85711c33753759f6a05bc6aac5f707c650a3973596e0c5c598aa170d5e1394cec63b32b8a1e0282f31575fadf91a000b37e8251a35a7","ssdeep":"768:flPXeC9TLwYmKKbRpD4cejd1NShEQWk7RkH1E/N/qTHO2Wi:ZeC9TLwYmKKbRpspjt0RYg2Wi","tlshash":"7c83f7edd2f0196a014353e5af2a10153a2d90376908c978f69d87992fc6fafc83f65c","dom_hash":"domhash6879b1a20e492ed42100b04a12ec11c7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetonline-au.com","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:36:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetonline-au.com","ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-07-28T16:32:16.417156Z","last_seen":"2026-07-28T16:32:16.417156Z","alert_count":40,"request_count":20,"received_data":330756,"sent_data":10534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":1,"received_data":22641,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":3099,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-31T07:34:32.652681Z","times_seen":29578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce1f62fb25addfaaa73a04d14357a68a","sha1":"3ba57efd1887ed32c5f335c9f9631ad41b52d113","sha256":"95923a35a7c1d535d4e46907d386a01cd265fc287ae0083e467c070c5be8213c","sha512":"6a0f267aea2657046046cf81cb92d942803f85650e65c631fd574ef8c5ff463d4c55e469d119d8240b2150026b564be4dd3d097bbfacf1d030848d5c70b369cd","ssdeep":"","tlshash":"e721e11861be10360163b4790f4f5a5e6234208ba04dfd5c7e6eea483fe6a61def12c9","size":1298,"data":"","first_seen":"2026-07-28T16:32:28.073628Z","last_seen":"2026-07-28T16:37:07.517631Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"afe12611f8e0922287a1a5ca44df9502","sha1":"7679d0fab21c765ba84682a090b90818fe527979","sha256":"d662bc330560cfd4c69cf96fb1751071a2b9e7a165e5d8c0f587eb3620d5dea5","sha512":"a49c03021fd3d3e53f56bdd038dfbda04e4af174c60a56ed3e10e60990edbbc54e8f761ea2c905702c0ca05cddc57c8ab56d42c5d07c1005e4cbf740bb8db5f8","ssdeep":"","tlshash":"4e017d1e5371243d0073a1aacfdfaa467219000f6205cd5a3d4d85492fc0ad1c5f55e8","size":658,"data":"","first_seen":"2026-07-28T16:32:28.074548Z","last_seen":"2026-07-28T16:37:07.518246Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7598a33052e4ca9053bc712366bf9ed1","sha1":"ce0e5f682a896baef5b38cdeadc689433d442413","sha256":"f6373e3365e3411b810bb89ede61c5828f7a4a25814ca03133afe319a3322bc8","sha512":"710538d3b1c2a4d868d9b791bba48dcde085cd5816630c0fe14186fca3f3c9172ee03585aa07b2db0ad3054ff203e610de7d708a878e62ef00984f9145e14210","ssdeep":"","tlshash":"01d05e2e71f138be443be81e434baaca24a2110f16408d683cbc49419f28d243ae1da8","size":261,"data":"","first_seen":"2026-06-10T10:29:54.353238Z","last_seen":"2026-07-28T18:57:29.585215Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/d6564f5f.js","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf183f4d18c63a74b24343e833af8d3","sha1":"7b56269adf40dab7f7517cb76abc46696cae2804","sha256":"be444c289ac019af8486b50fe2bbf2fdb2890812fb945dc78940b6781a68ac52","sha512":"75e4aa93cd80bb49a69c6f2cce208416d07160b3dd96a85b8d1936346a4a29b73b0eb04196b096b49e7e9e0c6751bef9849736a50d0978f78b827906ccd8e598","ssdeep":"96:5hxd6VIOvoGnRBh/sMqjBK54dZZPnAx8QfqNGMxxs8Tb9mfGuK:5h6VcCkjBOkbAx5ikMxxPfVH","tlshash":"209149e6e44170f13bfd64c6a2781220b23a1bb0b50290a4fabd5c974f2d687257df2c","size":4595,"data":"","first_seen":"2026-04-17T16:50:29.722561Z","last_seen":"2026-07-30T23:57:36.362789Z","times_seen":938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetonline-au.com/","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:36:09.866Z","timestamp":1785256569866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2254d19fd81dfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YI0Hx9PLQQvuwnRDHpJBqkRJDIGd1FSV9KLKCgEVYVwqqlynqNRwgJJ7qyrBYIDqODUvaZxnUTuuJjFwfal8cLXoqClwHt%2B088jDNbTLDFvUDgag8GDfLgQ2YttOW6UmHbl%2FiuK%2Bng%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82097,"size_decoded":18840,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4766)","md5":"a0d3b3513d2dd1debc7f503e676dbdea","sha1":"121be989bc9db43c72b53274cc7a9aadb3b982d7","sha256":"e9a4686fa6ed4f5ade10478e49221964d7266735d635cfc056282bfcd9afe95e","sha512":"4b8b1dd07335e6f531cab647b62370ea7c885195df9cd70c49508661eb8a6c68bcc4aa07e7e4b28e0ae198ab6c960f0ce8e39506163ef6574eb97d7c01a1f932","ssdeep":"768:elPXeqhjL046aGnxlp4YesBJYSqE42M7RkH1EHNXqYe3HO2WX:+eqhjL046aGnxlCFsw3JYae+2WX","tlshash":"208308edd6f0199b014353e9ae2a20143a1d90376908cd78f69d86992fc6f6fc83f65c","first_seen":"2026-07-28T16:32:28.063683Z","last_seen":"2026-07-28T16:37:07.503966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":27,"connect":17,"send":0,"wait":9,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/main.css","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.555Z","timestamp":1785256570555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/main.css HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-ray: a2254d1dfeacdfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"077d2c23bfaf5f1a860ab61fa8bfd2c4\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1oDZC8jE7G6jaUG6plMP1IYTWxBlj9aUWqdzrtomDh5ffKulMH7Xtzz1RFQzj%2BnH46kdukxyofMFMSEiAiFr8GrqOkQouHblaFhmO18%2BcnDuzhSubpOcZnUNGbOmXainU3u4ceLAQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74657,"size_decoded":14899,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2241), with CRLF line terminators","md5":"e2c4f2220cb634ce30a034484cd8619d","sha1":"70d08cc9209b9eadca1fa04131319ba2d57ea7a5","sha256":"0e3dfb04fc1fec8b75d85b3928f60f0b9e51691d5b8c11c90440a4030077254c","sha512":"a81df123c3bc53eb4540d60bc2db395727d9c0fac54d79374b2b894f4de6231a8adc669ecdf0494e4eb2628cdcdc271deef61781186146406d0c1a82b36b90da","ssdeep":"384:xgronuJ8OlDtsYyr1kwVJUbPPFz0RT/Afopcz6FINO040gZQ4qYvImqrREWuwgdq:SlDtBHFz0RTWwFIw049EDrSv5OBbsumC","tlshash":"4e73ff8c8a01524d673bbb3c6faa1619b74e40739f421274bad2e05c57e6369e13cedc","first_seen":"2026-07-28T16:32:28.065945Z","last_seen":"2026-07-28T16:37:07.513117Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/mega-moolah.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.579Z","timestamp":1785256570579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/mega-moolah.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e1ebcdfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a5223b5b4c8e166e605669c68bb63df3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dg1aPo1gOY5ADwEbEVOwo3HqjveAoDllM7iip8eFQKxTu90TxIfF%2FlCSbsOTj4baI9h3rIO8tQNslA2hCEYnr2sm3pGyBh1txAft0GPwGeQopt0eG821Kh1Hw2VhObQEyF9C2t7F%2BA%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15554\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15554,"size_decoded":16372,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3243d98e16eac91808aa3f7f08bdad5c","sha1":"dfbb71d67238ab4deb6b67464a316d45e7113d78","sha256":"0b312ecbd9c9e2b10517743adb9756c7ea19d1a5091b10ab448bf4b39d9968e8","sha512":"14a7dc09b980110c184ae82e1a386bbe94cf45894ee4eb35429cf98b5bc69f63aa86d81e3e14ccca96988bcf753189ab87327b83052cee49236468056277b3b1","ssdeep":"384:owTFqREay7j8giaPUy9lzuKtEK93St6/W0bQsUXAgM1fQ4nRH+Ur0zKT:NTFq277j8I9IKtr9CN0VWk9MVW","tlshash":"f562d0552d3b2706f4b303b45bf7db16973be8133a082968685ff852c7a44864f16e2d","first_seen":"2025-04-19T10:53:23.257344Z","last_seen":"2026-07-31T06:14:37.064348Z","times_seen":775,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/big-bass-crash.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.581Z","timestamp":1785256570581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/big-bass-crash.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e2ebfdfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2d58fb745e2e5cdec73fabb38db72ca8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7l7lsdOw%2Bz%2B4PCe%2BC4LgDaGg%2BUyAz0hi%2B7XxrOnelU%2BmQjMhN8serDxKifTXKgGpoQKwEvt1LUj0sspCKdJheaKM%2Bk1qxxSHenzzT3KDbK9eJunDclmDnnOVhpHVxcxsKmRtiVsYPw%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10188,"size_decoded":11016,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7dc97efd0759585c00cb031e161db9bb","sha1":"14419d544a006fb4ae3e1e74c5ad666c0c163090","sha256":"1a42ec6e4873a2b13c8dcec3dd2e9c2383e83d46dc123fe94bcb17f5cb8babcc","sha512":"1a076b803cdc8911aa0e7021bb1ba99be54ec044ee9a8f5ee42251991e63f715d7f3b649d76584fc88df4f808d00137325adba373284a8f757f6cc88b93e8529","ssdeep":"192:hwTFqRHhLug/QKUL/g3g5U62Ve8Ipdr7J50u/7QIHjwSXhF1lr5BTnA:hwTFqRHhaY6gQ5U62E82RMa7QIHt5vTA","tlshash":"7322ad88460c17cac2d30a7d72606d4ee3935e5b096142b6ee8c9f18351f3a0e665c8b","first_seen":"2025-04-19T10:53:23.260792Z","last_seen":"2026-07-31T06:14:37.085292Z","times_seen":777,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/aviator.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.582Z","timestamp":1785256570582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/aviator.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e2ec0dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d43f207f33fb1882663e9df74ce9da27\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Bt5ty1wBqwI9f9D3X8%2B%2BbSqq6eb51dLSzfNeNQEIcklLvec4wM8xqRMzARlXXjcoDpb2FSRY%2Ba1qZKQO4C8UtYHzmGJhiEuQv47kDGS8vL44Yt9Xrm%2B7EmHjYmQ6zmE7HDzZybTzg%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6108,"size_decoded":6931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6797a1d4d25360cbbc7d8e1d6b0a2c2","sha1":"cfee8c1c4f5dcb88d3163fcdee91027e77e6a4f3","sha256":"a12a40f5f4ac23b758998e8acda4fee1e5153851a758b3138911d94362b097be","sha512":"4969912b00aed5caef8c113f0d851505a5d96c5360342e1c6ecf4ef51e4dcdbfe1543671521d9d06f1fce46dda8d2bca0916ccb4d2e62dde5e19bb24ba37e61b","ssdeep":"96:kElbw+iXFqRoRSf6tJdPo6/vvkgGffwuucNsNpfIbwH7o7BJbWHA6qGTEmhudDf0:hwTFqR2SKVo6/vv02cNsNRIcMTbAA6Tr","tlshash":"7dc17d8a4b6c477bf46413b2ab54a902d3f1bb26cd9fa997e495b3a702d13874364002","first_seen":"2025-04-19T10:53:23.252715Z","last_seen":"2026-07-31T06:14:37.066849Z","times_seen":760,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/api/send","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.774Z","timestamp":1785256570774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rainbetonline-au.com/\r\nContent-Length: 263\r\nOrigin: https://rainbetonline-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"0d0a090d-24c3-4698-9e06-040209159d70\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet 🎰 Play 7000+ Casino Games in AU Today!\",\"hostname\":\"rainbetonline-au.com\",\"url\":\"https://rainbetonline-au.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Vwz6fiKppQilpLqEKjFds1h2gz2gqlEk%2BQ7MEyc0Vpkr70WsRumNhMOna4Vlj5z0%2BWdyWS8%2BhBtwAY2TXahX2GkcU4Sy1svduqOvJOfA5vqy8WB9wVFk4xGB%2BXwqutU%2BcHBXjhT3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2254d1f5eefdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":908,"mime_type":"application/json","magic":"JSON text data","md5":"e16ad34fba7ddd89073efd213553ed3b","sha1":"b56818f33a5ba9b5c4bf36ab2f408693f38dd769","sha256":"9dcb393c006e65a1f97667c22365002e2235913bce9193ee0da50e320fa0ba7c","sha512":"df42204486fbff44c8e11732d92faf5b0262e7e2e37c734f42ca139b5ff7dfff07b527f0739d79e433790510cd6d8f2ae6025f9c1304f5a670e3ba66040d3a41","ssdeep":"","tlshash":"b1e0aba548407efc1a5a65d05ede52ea9d583cb55f68642c90e47628b3286c2640b25c","first_seen":"2026-07-28T16:36:38.966319Z","last_seen":"2026-07-28T16:36:38.966319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/balloon.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.576Z","timestamp":1785256570576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/balloon.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e1ebadfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3dfbee3ad9fa7bed4486036c4719a8ef\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzZPV7eFLaW%2F%2FAdiwDMUMSkKIpfR7gPQo7Z87QY4geAB6O4jNXjQnXE8NpJTL%2B4jbAeKxQSP13EPzzVfyKwSn09%2BPRaTwXKH8Y2gufjxAZhJVO%2FIylHqs2iBJaw7H5La%2B4pt7T1k%2FQ%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6384,"size_decoded":7211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f85083cb20782297de615432a45b13e6","sha1":"6841c73b55738e1cba63b7efc1718bbe405473e2","sha256":"5fc5c3310726769da5d415a849b6a6df3ce9690cb52372c344353bb8a37349f0","sha512":"be00fb042021f2411ce8071a413570909c80d055c7249d014245c915ab7916df8b7c8957dfd35f52c43fa503823485a0a2e258819685cc6c6cb4e460b7a53dba","ssdeep":"96:WyElbw+iXFqREygu8WzD4j+clYmksVzdy+zEspLeSVzqp4aCiQYRdTf9ehz4hSfR:SwTFqREvU4acGm9/BzJJBaQYYzkAtdHN","tlshash":"f3d18c331e1c935cc1b967b918d50b17b0715c696e3abf86c29500ba2e7fac74c2a989","first_seen":"2025-04-19T10:53:23.282061Z","last_seen":"2026-07-31T06:14:37.091034Z","times_seen":750,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/d6564f5f.js","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.560Z","timestamp":1785256570560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /d6564f5f.js HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=21600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPY%2BkAdwPdr3xKbIpKkr%2FjcuEtOGLM06twEwP%2BZ6e0zNbH6ObpBgoHVyyI42mQ1pJP06eBLEOoBstSna2tqn6YZi8Reb9LJtK%2BCt7yRyu3PRb79rV7GtWUX49LD9ivnN9iHBvWXYmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2254d1e0eb0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4595,"size_decoded":2901,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4594)","md5":"8bf183f4d18c63a74b24343e833af8d3","sha1":"7b56269adf40dab7f7517cb76abc46696cae2804","sha256":"be444c289ac019af8486b50fe2bbf2fdb2890812fb945dc78940b6781a68ac52","sha512":"75e4aa93cd80bb49a69c6f2cce208416d07160b3dd96a85b8d1936346a4a29b73b0eb04196b096b49e7e9e0c6751bef9849736a50d0978f78b827906ccd8e598","ssdeep":"96:5hxd6VIOvoGnRBh/sMqjBK54dZZPnAx8QfqNGMxxs8Tb9mfGuK:5h6VcCkjBOkbAx5ikMxxPfVH","tlshash":"209149e6e44170f13bfd64c6a2781220b23a1bb0b50290a4fabd5c974f2d687257df2c","first_seen":"2026-04-17T16:50:29.722561Z","last_seen":"2026-07-30T23:57:36.362789Z","times_seen":938,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/logos/logo_rainbet_1778486567618.png","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.565Z","timestamp":1785256570565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/logos/logo_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a2254d1e0eb4dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3ab9be946ed4918175550e7c8d705b97\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfOc1GdA5mG%2BICHZl%2BKQkWbhPUxmDdG%2F%2BZfWllJLuRFZfPbmFcXMyoDDZWnRM9O0Dw%2BV%2F2paVDtr2KgIQhKqAE0MR8ItCDHJENB%2BPAhtPvYxVl7%2FDmXIMZsFu9KgRj4i7ErgTZ1%2B5w%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2336,"size_decoded":3166,"mime_type":"image/png","magic":"PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced","md5":"0c5a16240b42a97b92013ef13b41299b","sha1":"baa8648cc2ac5b21b8b9f905a5653d4f9e25c873","sha256":"8c2109ef522b7fb58ef374fcd9dea4d5bdc11452c472b70c50abea68be55f640","sha512":"d8fbed18c0f364ec7ae6131db540efe8c22ce64d7750633b789d38797b7f94228db0ec129086b786fb93cf8bea0762e6cb6ba4c921c61b9da375129598a2e82f","ssdeep":"","tlshash":"d7414b1bb2e72e86efd4a137d19fe6119f7a8d19bdb2109c4db0c05b841e430e0b8d90","first_seen":"2026-07-28T16:32:28.066966Z","last_seen":"2026-07-28T18:57:29.580306Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/reactoonz.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.567Z","timestamp":1785256570567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/reactoonz.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e0eb5dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"75b04d3bc39e55954dfa47d359a02689\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlnyLqMhSfIbod%2BPzfAi2r1CWFSf31tgBCbeBhE%2Fv05Q%2FGKcFiEQ039vjLK%2BRD9LgDKBV3ODKVbOXP9ty2Xw%2Bcat0vprL%2Fsep8ti7AEh5HIeeWaUs2MJzi2Fv2n82EgJky0BwDb0lA%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9784,"size_decoded":10609,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29488621edd2862b806cb6624336fa52","sha1":"8905dfc5e79fab6177f6051a061266318b566108","sha256":"5970f76fda41d1e937c574a61a4d8626879abc59da698f2066f7250bef2cbbb6","sha512":"90fc7b394bad56678aebf6eaa882ba49e5b64600778ce785184587eea91ed6a8d6fba2cf17f631e9e659e3be2a10e03d22fc135606b36440e284a7dead641d17","ssdeep":"192:kwTFqRMXAB/77obe+j+TerlNqFTVD+v8C3Fzhv43Vm2Dp6Sk0Am7CeNKJ5p:kwTFqR9/77ob9asNqFTVCUmUF6Sk0AmS","tlshash":"9312b0628e4d2d5cd73f32392143cb8b437eb6bacd4a67bc181847232546df6894414d","first_seen":"2025-04-19T10:53:23.291794Z","last_seen":"2026-07-31T06:14:37.072747Z","times_seen":778,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/moonshot.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.571Z","timestamp":1785256570571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/moonshot.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e1eb7dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"969cdab8862311f2b6868e7dc67db8a9\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxATJtLSi5ZCYUFYWf%2FsS8jFhNec4Py7p09Nwkwq9b7tlNJ3UhnDzXyHzG%2Fydytp6g6nDF4fHFcNKtJtiD7j%2BBwBwtiv9QSYXw1wcxHCoscYbjrQtNbtHzthYpFyyz9X%2F4Lrof%2FXaA%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7492,"size_decoded":8315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42643f08a84613ecace04b2b05aa3823","sha1":"10dac81c9f6841196993fdc994e4cf69a7135611","sha256":"8464aea62123aface407c558a4d5d3529ffaeda597d4f0cc10528afec8e4f2f1","sha512":"6f9c26aa92c062fcd644ac1b8fef45cb8e348607a71471e6939a37b3a6d9326e345ba9f524e3affeff8686a8bbf17b4a586cebeb9d78facdc4afcdcacc66aae3","ssdeep":"96:M3Elbw+iXFqRRFFEfpLKyq+FOthNRwKRcs5vrfgfjpu7BrxEiiyxcMDpbinfZYqK:zwTFqRTFEhLM+F0rcjwx9EnYuEncW","tlshash":"68f19e8f1e1597d8f889d3f164426ac6fe8ce80bd2569167c8d68b2c1e24c642cbf214","first_seen":"2025-04-19T10:53:23.25997Z","last_seen":"2026-07-31T06:14:37.062783Z","times_seen":777,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/favicons/favicon_rainbet_1778486567618.png","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.739Z","timestamp":1785256570739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/favicons/favicon_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a2254d1f2ee6dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fa47691c9097ac3c60c47979a688ade3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ene%2FBQ8GEXSvhRiNB18qgu4hKfFEa3rUW6NO2bmklIsc0eD4jY2IpTTQzs7E7Eu0UEYSKAP%2BOwIztBqKBc66oFMDbnIv13CKfmXiV%2FAdCQFoxtVGBb%2FHlf4MTzuyHQ%2Bq6%2B0ghjigGw%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":2203,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"9aaf481b10264f0d5ad03be5d82237f6","sha1":"274d351ff72a1909812fb36cc1bda2557f701c24","sha256":"6cc420ea5ade4b480cab4a363be162cd3b10a49b9d2669bd4d174be5f5dabf6d","sha512":"2456efb0b1b7da662143e78ab4b7b11667745a114e5e17cd404cf9d7fffb0efaaa6fb138c8272a385811ced7eaf2de600003b463415664e7ec4f67f753506d06","ssdeep":"","tlshash":"6d2108829fdbc4e9834ba181420227b50c766b984d8331283768c460f2364a37ea4ef5","first_seen":"2026-07-22T09:48:56.776178Z","last_seen":"2026-07-28T18:57:29.57191Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/mega-ball.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.580Z","timestamp":1785256570580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/mega-ball.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e2ebddfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"de73298e9901f63a3ff892dd4b74439b\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqTNtnKbwqK77YeVbNC3pUXGxmDkDIfmeqgrdrcHHtk9VsBiOG6m8lEAewpw87jj%2B04HmXpnc4ykonUW5BY5KfQ7TGLHctIAy926o7nxE3lTc0v4%2Bz84iGm4Z3S%2F%2Fq4wcG0M6OOP6w%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12348,"size_decoded":13170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e48b3e0a64be2fe6ecc1f019c7094346","sha1":"078a96c223cbacdbaf140e3c71c85cc1aecf5e91","sha256":"3598d8cdb398a041210ee8bdbc9f262a63db9dc46c228483c76b0ab87039cf08","sha512":"37f819e8654a2b3fcc56a4f72be7d0a6369ba599d3fa2f5da4a4b7e63e14b565b9d7ed75ea15f6c495cf960c1fc80bf9cfd51f2b8a1e3a8cff5446bbbfed5dc8","ssdeep":"384:mwTFqRGeFsJHesZef2Gx0+VIeTnEyiJMcqAfjm+:fTFqkepsZ6d/xiOcqALm+","tlshash":"6242bf13267caacdc7adf8f71988732cf75cb52fa484c7d6412dc2012a05da099adca9","first_seen":"2025-04-19T10:53:23.255482Z","last_seen":"2026-07-31T06:14:37.061149Z","times_seen":776,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/crash.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.585Z","timestamp":1785256570585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/crash.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e2ec2dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"96a5d3e82feb03329ea133da326b8902\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEgn1baRbP7O1nx0lbjd7YjgtHdIqWfUuVS0ZkTU8G17pIljSodyCt1xpxXBrwR%2Fhdf8h1xh%2BT7PBawZzTL2owDt5vEC65esUeETZ8MDJhgbrsv1EqeJnncCnCJHZ8zEQR2%2BJwFhJA%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5120,"size_decoded":5939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60a0d0601e5634bfdfc41553f6cc4503","sha1":"2738912cbb4a68f98d01c303ded33b9d6380c542","sha256":"c78afe371e43cb4fc0309a321307e924209300237fbd1e9b8946c1da6e435837","sha512":"d6daef2a694cedfdd8674f8fd961b004e35faefb43261783fc17d1036f440a87d21f02cc3bdacfc1b56acafbef383ad76b1560e9e19b62a5efb36a0420ec4a29","ssdeep":"96:0Elbw+iXFqRkkmNml/xQ+Oj4MpX0d4b5wMlBqb9mxUt0ZMDQE/eqeR0U:xwTFqR1TFWXpX0mpss+t0Z/E/8aU","tlshash":"56b16d16450ebb7edee95a3e70640ac312edee00db5ac30b5a2035a31f3035ba0f8695","first_seen":"2025-04-19T10:53:23.271794Z","last_seen":"2026-07-31T06:14:37.054701Z","times_seen":775,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.660Z","timestamp":1785256570660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetonline-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:01 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nage: 530709\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21828,"size_decoded":22641,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-07-31T06:33:54.626318Z","times_seen":2767,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":32,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/bustabit.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.577Z","timestamp":1785256570577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/bustabit.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e1ebbdfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0031e7b48440a88a1593b5589e21528f\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtHoLQ6wrGVlxNt1lV6Rgmt04UuEZx4McEKhwocoDgub6qWjL2toG3mWozU2%2B%2Bo52MpAf%2FiELQE3kfCPtQbnSSyrUHg1azZJ0FqaK1Fk90XFRqaYtVxQANqzHOuThFx5KyIwscOeEw%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2592,"size_decoded":3411,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97cda75a26fe1433d4a1d5e90468d892","sha1":"e247a8f397f3cfc14492b06a88f4ae3b949bb650","sha256":"c67edea7283a0d72740e5a474861f025225eb1480853b319dfd24713ab6e9973","sha512":"9e641f915857675569e315749f7782d78981c2c94a496ff0504e5d190052ca8491897d39e52b0467057ce3d816039b8f488203dc3a267203ee6d81677b5badd1","ssdeep":"","tlshash":"3a514c4317a83386f6525a7170835b03db421c07c64a371bf8c029291e1d82b9d75103","first_seen":"2025-04-19T10:53:23.266744Z","last_seen":"2026-07-31T06:14:37.057423Z","times_seen":775,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.552Z","timestamp":1785256570552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Exo:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Jul 2026 16:36:10 GMT\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2415,"size_decoded":1179,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2e86ba0cb974db0ffd17ad8c10a9a101","sha1":"ecca1c3ea1d50ff28d2f22f0077e8ad82894a7fd","sha256":"b937054061ba78b10cc9cdc02ab8607ed0e97eb897ab5ea23e9d9d0e7b4b2553","sha512":"dd700713bbd2ef00a36ca071782fdac39fda243304c40d08fa50a07af18d3cf25fcf9922d5144f47bd6c37c28459704105e6a8019e5628ab4ffc42242b85d125","ssdeep":"","tlshash":"3641c151042a6104fa831cc627ce7d36ae8eb1547454c97c7ffd1889ec9ec11135975d","first_seen":"2025-09-17T16:00:12.104877Z","last_seen":"2026-07-28T16:37:07.512232Z","times_seen":96,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/promotions/promotion_rainbet_1778486567618.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.556Z","timestamp":1785256570556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/promotions/promotion_rainbet_1778486567618.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=3,i\r\ncf-ray: a2254d1dfeaddfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"448ca54ec8a1eb89e8dead0713af3c4d\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZpRiYim9OpvtJoq5MlAfMLzedfodz0eVzYEL%2B0ajcgoyL4UwHNtdVtd%2FCCCf0CmdRD40jrJu5Xn7gS3gTAIMPUAboQIzfgIlqZRbZd7vVZQoUsGQ2xDu3U5oiwReJ%2FX9QWGmvwcAw%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46848,"size_decoded":47668,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1110x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"305020c2ca4f56bff7162e3b0778cfbe","sha1":"2c9ad2b3bf02e596967be2c1413788a95456d8ca","sha256":"ceb854c2612f2d3b391d44459443e9e154a66a0204f281c17109c2dbd7331509","sha512":"1992794dbff92702d80dd2889a6f08320634659e8deea2a8e6d895a3160833643e0f566a54d3579d73db202fb2cdcc1ead755047ed890d9c3b43bb7d04fc0331","ssdeep":"768:hOj8NzzC7+UmmJHjpPFcuKHeHrCeB7m43/SRLwT52iLQ9MLr1Q9o2Y:hM8Nzu7xXNcuseLMa/Sk4iLQYrExY","tlshash":"bd230234563d0e868ec37b551392979a294c97ca71fc85ee799332bfc8e1484897ce07","first_seen":"2026-07-28T16:32:28.064512Z","last_seen":"2026-07-28T18:57:29.572733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/live-blackjack.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.569Z","timestamp":1785256570569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/live-blackjack.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e0eb6dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7f5fdb8061aafa0658639d624509c60c\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMhjI1fz4d5mQw2hk3Yi7Iib3oTF%2F3qriZwvbRIlk54pT2SGFLoPJTEC6WpQWMHneBakZpYIncHQl0yxeuADYN%2BLNEJEkk%2FFIIvdldVdTMKUAe6IK2FjBCAsde4lkMvBARx1tWlBoQ%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8572,"size_decoded":9391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"336e3f1eca499c7b97f2b14da985497f","sha1":"7a495f8a39b7f2aedbfb02e21faac63c07b8a3a2","sha256":"ebc734b00416df6a8bf47b734a1e4915aa76eada4664ca9a5a1779d03f82776f","sha512":"59f41bf043643c4ac61f3cfdaef1a5a9ca92fbeac05da4666f39b84d01a18d17d8a6eee4092f828b8054740e73d3f786c530a147d6c3f022de3b3b829d0aa614","ssdeep":"192:PwTFqRqg9JHgBz26sBbeaE82WfCrq+swMXjGOlTbT0y61BOhpv1VL:PwTFqRqg9k26sBKaBfCrHOjVbT0y+BOD","tlshash":"8802b063012072b8d1154870ba4efbfab3b73c8dc05593215b818fa457eb6c1e55d243","first_seen":"2025-04-19T10:53:23.295703Z","last_seen":"2026-07-31T06:14:37.070379Z","times_seen":775,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/tower-x.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.573Z","timestamp":1785256570573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/tower-x.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e1eb9dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3960b4441ce72eef089c8920f2a53ad7\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mriznSjbmE1emEB7%2FN1F%2BxJyDPpQVcGrTCGuvCtkUHsVdFLYpysWCKINMu7q8v%2F7TNSsMXfKO%2BjlVczLB03mArxsPzhm1VtnVOtirryPHY44GyEw4Wjj2ZPhymsSNlERw5YwIDTPA%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8864,"size_decoded":9685,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3539421a80170107bb41f6bb935dbbd2","sha1":"f722002c56fa51ece186d93c1014b9e6a015780a","sha256":"a6b93060802d39d2c7bf0b014225a5f7bd66531b0ed54bc409abf8d3dcd1c040","sha512":"b1c47f43063752262159be7cdcec1c9e8282c5b7a11713019f84e9435e61b9b08823ee9a51988cb07316ecfacfed8ed053c1fc54e46f1e48823383b3523ae820","ssdeep":"192:wwTFqR3wI+y7gBux3uiodm/aUfSX/pd1ra4BFjj9YX9Ix:wwTFqR3z+y7gsd9lfSRd1u4PjKX9Ix","tlshash":"b702bfa94abd6278ca67f93034719c17b1bd192083a540e912ec860fbf95180f51746e","first_seen":"2025-04-19T10:53:23.250783Z","last_seen":"2026-07-31T06:14:37.064953Z","times_seen":773,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/images/spaceman.webp","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.583Z","timestamp":1785256570583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/images/spaceman.webp HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2254d1e2ec1dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6b45a37f0b869913648b0568a2e993dc\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNHDHxKVe7EkvvE%2Fc0uGSR2q%2B%2BNMpCFgk7MN%2F6fQziUBfP7enX9TjTeUYKMVmSq9O8zBh0TeixwtGPoT7D7KwVau2gMsrSjpu%2BZ4SHxbAnEdnDxaVwiGTABPO4NqqeHmbj840a758Q%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8014,"size_decoded":8837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b84711c104b82e640ea9017bd17a582a","sha1":"1d8e5505b3f3fb6aa484e4fbcea4a1812456148f","sha256":"bfdab695e9982aba209cb8fb8cefd04ac7098a52447f1caf1ec433e13d71030f","sha512":"1525d93d4284920709f913d2cf8472e993c6b148f1a5973ae98a4fe7f081c35d316f2e5e26d0f82377f5eaeace82a3d08e5ef757a6e313cec8a762cdf3236b89","ssdeep":"192:/wTFqRtua6gLhnMCbwFbAoNZrUaHk1kS2lodsMEa69D9hNwV:/wTFqR4a6AhMnmoNpdkySAo2MbED9haV","tlshash":"27f1af2f2d1b6712f801077294b2ba09f3546a6b770fb3c691265ef91f5ead84422cc4","first_seen":"2025-04-19T10:53:23.261604Z","last_seen":"2026-07-31T06:14:37.088977Z","times_seen":779,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-au.com/assets/favicons/favicon_rainbet_1778486567618.png","fqdn":"rainbetonline-au.com","domain":"rainbetonline-au.com","tld":"com"},"ip":{"addr":"172.67.167.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-au.com/","date":"2026-07-28T16:36:10.740Z","timestamp":1785256570740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:11:15 GMT","end":"Sun, 25 Oct 2026 13:11:14 GMT"},"fingerprint":{"sha1":"6C:8D:86:E4:44:2B:C0:1A:E9:9B:84:F0:12:2E:D5:14:E4:05:90:CE","sha256":"E8:05:AB:0B:B1:45:51:32:EC:1C:6E:31:A4:FB:D6:A5:29:3E:60:27:A5:34:E9:5B:F5:47:AE:CB:EF:47:9C:DF"}}},"request":{"raw":"GET /assets/favicons/favicon_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbetonline-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Tue, 28 Jul 2026 16:36:10 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a2254d1f2ee7dfec-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fa47691c9097ac3c60c47979a688ade3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ene%2FBQ8GEXSvhRiNB18qgu4hKfFEa3rUW6NO2bmklIsc0eD4jY2IpTTQzs7E7Eu0UEYSKAP%2BOwIztBqKBc66oFMDbnIv13CKfmXiV%2FAdCQFoxtVGBb%2FHlf4MTzuyHQ%2Bq6%2B0ghjigGw%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":2195,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"9aaf481b10264f0d5ad03be5d82237f6","sha1":"274d351ff72a1909812fb36cc1bda2557f701c24","sha256":"6cc420ea5ade4b480cab4a363be162cd3b10a49b9d2669bd4d174be5f5dabf6d","sha512":"2456efb0b1b7da662143e78ab4b7b11667745a114e5e17cd404cf9d7fffb0efaaa6fb138c8272a385811ced7eaf2de600003b463415664e7ec4f67f753506d06","ssdeep":"","tlshash":"6d2108829fdbc4e9834ba181420227b50c766b984d8331283768c460f2364a37ea4ef5","first_seen":"2026-07-22T09:48:56.776178Z","last_seen":"2026-07-28T18:57:29.57191Z","times_seen":8,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetonline-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}