{"report_id":"c4dbe310-2147-426c-9a8d-e62c68c276a2","version":0,"status":"done","tags":[],"date":"2026-09-08T10:06:18Z","url":{"schema":"http","addr":"rainbet-fi.com/","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"104.21.68.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-fi.com/","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"title":"Rainbet Casino Online Suomi – Nopeat maksut ja eksklusiiviset bonukset","dom":{"size":83639,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64373), with no line terminators","md5":"76d4c70f48c2524119ed8a5164ae4a28","sha1":"ab2c44b13722fb2a9036a7a0f89ade678c9e12e5","sha256":"cd5631372f0c91d6dd5c87a376e4a276a2a5b37f8d51f1d22f90b5e03867e7a3","sha512":"75cb97f625ee237e970aa9cac9c8f2f9709a2b2a7d2e7a91fd16f0fca1c041218d596bc7ea2de56ec1da9c1709fa9b8fa6f81ebec24054a04d5a63115c8e0da3","ssdeep":"1536:UXVNFHw93VNY31by1BHa8R/wR4MengPsnc5VlvFpAfsE3lSfDcRDmV35kxHLm14+:0/5j99azS05la","tlshash":"8d83c692a251c237a1b742dd95a6a76930d5e34cca4044b5dbaff3f246eec823c3351e","dom_hash":"domhash642c245b7d1f3c32ea08613289c109bd","first_seen":"2026-09-08T10:02:07.18005Z","last_seen":"2026-09-08T10:06:21.039317Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-fi.com/","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"104.21.68.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T10:06:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-fi.com","ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-09-08T10:02:02.341117Z","last_seen":"2026-09-08T10:02:02.341117Z","alert_count":64,"request_count":32,"received_data":1398981,"sent_data":17825,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-fi.com/assets/tracker.e69c01b6.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07efaf066ad2080ed97e67b6d2f17a5c","sha1":"587303c9380abd3f3ad44193c8982e3df3e15e71","sha256":"e69c01b6b4e8a90c8cee69436db4ff1bb8fcebd73888f21b8c4bdbbd734f8047","sha512":"c81d837af1c9dc3ddb2a11198527b0213e37b424f08f923a2bf05640fcebed2befe9a805581e2adc1f8f79a80787f9f0d4ba74af5d42933e0fe93ae5e026518d","ssdeep":"96:SIUITlZsEu4mBAOVdHnW2z84XS4QywgsYGLUA7g+PthpMa+Wu:SIUITlIvpALUOgoea9u","tlshash":"7491a3846e12b0d1332209e35f7e144f962589c1e3c5488ed23866d4bb1af61dfcad31","size":4378,"data":"","first_seen":"2026-09-08T10:02:07.214185Z","last_seen":"2026-09-19T07:38:53.858256Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/partners.33b743a0.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60aa025ae1265f5135193cdd6bd3d9c1","sha1":"5697f8d42f6ebc96a90d84a06b7f906410a8e9b8","sha256":"33b743a046b041f7393ef221ee6c36259c27409065b8cf4b82acc12a1ca41fc0","sha512":"2fce5b692a87237e7a3c0618322a266939bd5261f20072b33127c8b0b51ebef0cc92acbdce2de866077f7f4d582a871e6124fe8c6989e708be0d8d39604c497b","ssdeep":"96:2mBAmV6Iu5wGWcZ0N9M6DjiFJSFvm+mr6qZ+qpwVmx:lbEzZRFJSFvm+mr6qZ+qpcmx","tlshash":"be8130815f81b6e033229cf30f3fd4a95739c6d190c7c70af2255588ad58b9db9938b0","size":4136,"data":"","first_seen":"2026-08-31T18:35:31.008931Z","last_seen":"2026-09-19T07:38:53.844665Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/theme.a45e2159.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7b17b07582b89088c462649bf25b15","sha1":"84ffbfa566e728f0401496a4563df016a5b34b61","sha256":"a45e21591a80a99552fd189d0458e903071f96ef2a7bbe50b914b7fd5644b84e","sha512":"55458c768551e9264697c3e268d7aa2c580ed9237a487a6ac191c9503b887f554a42c3352d5e7234e9292f7835d6ee10b1e2eddf857c6a7bbb92e71f288e509c","ssdeep":"96:/mBAwVVDKi7wQFUByauiZvwKrZZmqSmY6jn1L/LH1LqAy:ORPFRiRbrZkqSAhLjHc","tlshash":"4aa175497d4270d132239ef32f3e1096c9219bc1e7c6459ee23da4989f2cb1d8a5bda4","size":5017,"data":"","first_seen":"2026-09-08T10:02:07.215082Z","last_seen":"2026-09-08T10:06:21.067387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T14:29:51.602845Z","times_seen":436748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-fi.com/assets/kit.f00ebe50.css","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.347Z","timestamp":1788861948347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/kit.f00ebe50.css HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 12:28:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy4g32MBDNajlFrrWzWeXXcivkM4iNay6i%2B3xF%2BHEh1NizxGz0xXRGfsCRrmQ1Ta713any8N4UVx%2FXEDmVP4zdBAWeN1vp8lqiTNI1cQKt0tQLiU3e2Se2Qvb7NsC6TuLg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c38e6-5930\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230928b4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22832,"size_decoded":7139,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (22830), with no line terminators","md5":"0c5b6ecf7026d0d218ab4a1cd58e3f24","sha1":"b35668ba480d05a359b941a4bc1e0aea783e257b","sha256":"f00ebe50777b94c141efbaf6a7f58a9876ac9453b465c3597960548162bdbdcc","sha512":"a472c4a9e1bb16a5c93f00e8999f7d8e7de3639b6aeff81ad6bc0ca544c44faf625027df57214258d6e63d004125d488fc1ba8e2c7ebda14dcb1ccb120f81cd9","ssdeep":"192:he+ocsIzCphe+mPN4jmqVLmhBlPRH7PFvwtBrB9SrRyt7NsD1zdMopbeDFm+Ztt2:TCT3SH7PFvTOz/XW+wcSTJXeHDiX","tlshash":"3ba28721631163b5ed27ef687beaeb0eb358a013950142f9bc950049c4cf3f99663f86","first_seen":"2026-09-08T10:02:07.183897Z","last_seen":"2026-09-08T10:06:21.042448Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/partners.33b743a0.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.352Z","timestamp":1788861948352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/partners.33b743a0.js HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 12:28:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cot8iwPdei3cdlvGMck5r5WYk0%2BMrDEQX4OM6YGmRm2E6JRGh6ukWVJGksR2MLjOvS4AC8kQNT94AZ9whdOzDLp0PAN8ZQK2Ztfdfd5peZSsGcSnqvdFcwarxgHPTU3fjw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c38e7-1028\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230938b7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4136,"size_decoded":2811,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136), with no line terminators","md5":"60aa025ae1265f5135193cdd6bd3d9c1","sha1":"5697f8d42f6ebc96a90d84a06b7f906410a8e9b8","sha256":"33b743a046b041f7393ef221ee6c36259c27409065b8cf4b82acc12a1ca41fc0","sha512":"2fce5b692a87237e7a3c0618322a266939bd5261f20072b33127c8b0b51ebef0cc92acbdce2de866077f7f4d582a871e6124fe8c6989e708be0d8d39604c497b","ssdeep":"96:2mBAmV6Iu5wGWcZ0N9M6DjiFJSFvm+mr6qZ+qpwVmx:lbEzZRFJSFvm+mr6qZ+qpcmx","tlshash":"be8130815f81b6e033229cf30f3fd4a95739c6d190c7c70af2255588ad58b9db9938b0","first_seen":"2026-08-31T18:35:31.008931Z","last_seen":"2026-09-19T07:38:53.844665Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/hero.efb6e61c.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.365Z","timestamp":1788861948365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/hero.efb6e61c.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 07:01:16 GMT\r\npriority: u=5,i\r\netag: \"6a84033c-a3865\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EAwrIvFDQwbvPNKmUWFeJC7m2QXK%2F0BLehH%2FBiZGZM7NG9gzlf%2FnVqWZAKOugcz0ntlSn2%2FgIg%2BmFAVVIqtDeLaNQ2U97nKP6aKAQNU1oK6EVtzJMfCdmNdLPJ1oo4z2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230948bd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 669797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":669797,"size_decoded":670566,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"7a866108a911ef032fd1de307bc94b08","sha1":"b96707ddac12692c85347574be498fa5e765bf9f","sha256":"efb6e61c619550b42a8405bcb5246ad46b7abdf0cf8c75c843f96a6d675727a2","sha512":"4cc51801d2b35f20857223f8c54b1b8442aec4af81bf91d5eaba2967727ee7544953f78afe0b6c37be9cdedc15606bf6671f3509b7970628ba12736cc746f121","ssdeep":"12288:tSB0OSqLQ1LLkLA4uYuJDAkmRuA18VMq9Hti9O/G737ms746hvj1kR:tSThLEYGdhA7uA18Vt73q7jVRk","tlshash":"d0e423e7cc1b41eef3ad5c22b4cb288d571397901b89ac6ca7a26520e4dcc7512f6d1e","first_seen":"2026-09-08T10:02:07.22059Z","last_seen":"2026-09-08T10:06:21.047228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-f1c28ac68154.1b82e0bd.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.570Z","timestamp":1788861948570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-f1c28ac68154.1b82e0bd.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Aug 2026 16:49:39 GMT\r\npriority: u=5,i\r\netag: \"6a7369a3-5eef\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbhJ%2FZRe0R4oS5r1CY13gv2YCYijhR7JYXkolqsWG0NXke7YBl6avsxkoZglIjJFF9x4vwV62amIgPvzhSDpPhU%2FY0ZjOFNe1Kzc7vJ9Y2YSbY3PNTY3huwGv6X39tN0Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a9959120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24303,"size_decoded":25064,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"595c4c009d2a03f67e831f8fa2d2c3ad","sha1":"20de1983a47943e441d069ef226b49d9d49ccb39","sha256":"1b82e0bd160cd4ed1bbd38b2547d73c066c5fecfcf0ba983a57d561cca78b4d4","sha512":"0fba8e05b0693406b79f82b28dbdf7256983c9023e798db7684c5b575df152add6c5b951990222cc7a499b45696671402f6a5efa115581320c8aa7997952ba34","ssdeep":"384:uQ2IvoVYVVt+mNFly1B/11FOChknJrZBeuZSMvXNr8VGIdoPuQkndXpjm:92VuVFy171FNIzBRbeQnPuPndZjm","tlshash":"6cb2e1de376dfd216aadf0fb97300d1a2ad9c4e7490eb331ea2891d49c8524ad179343","first_seen":"2026-09-08T10:02:07.198675Z","last_seen":"2026-09-08T10:06:21.049638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-5b4ac23f19ac.d4b1c3b1.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.590Z","timestamp":1788861948590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-5b4ac23f19ac.d4b1c3b1.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 07:19:06 GMT\r\npriority: u=5,i\r\netag: \"6a74356a-5b35\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWQw0LvMWI1%2FzIQcze2tvzS%2F9s5pDtY4dzzHIe%2FyyITvLJmOXn%2BIqtukDD1U1T%2FpwkosCl%2Bic%2B4ifcXa7CTdEjFr6K18rJeYUMj9An3BawBb0Iht%2BeLBZZAXZkmD6gxy6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa969120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23349\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23349,"size_decoded":24122,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"a2ad58597072b2efc2552c4ba4afd56a","sha1":"ed5fb62f02e998ca92a37efed113728faa5705d9","sha256":"d4b1c3b1f1e0d0fedebb71dcfdeb73524d68b681c4457f15bebaf59ce3044d15","sha512":"c46adb67b468fab2d4201e7f4ecca05e2c90aeb1d64657326796fed39b2d102dfea802d432f2f6185a0d24b259f3880f5777292281806a559dfe7685a97bd479","ssdeep":"384:ktGAVLyWTijJWHihGeeEGUry/fgRth3HAR4KJqnYPxvP2FT62BAbe+K9w3cQVDZs:WVLyUeJyionENufe58JqnYPxi+266WP+","tlshash":"4ca2d16ca5a8d74ab01fad64b144c4d78a9eb6db1cd87ba5f30ef80d292343c45369f0","first_seen":"2026-09-08T10:02:07.212024Z","last_seen":"2026-09-08T10:06:21.0529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-60f8ce6672b2.7eaf6f60.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.593Z","timestamp":1788861948593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-60f8ce6672b2.7eaf6f60.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 20:38:50 GMT\r\npriority: u=5,i\r\netag: \"6a724dda-83e2\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSOcRSIwwFSzj8BUmYZXhPIXsPcOOz7uqJDNuNu4fUaH0aC1EwcsXz%2BKqDm756Js81hxsTvVYwStPI3RYMOJup9JrEyhvWBf2W9UBFIpxiMpqbv7fxll8SuI%2F1GJ%2BMtp6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230ab96d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33762,"size_decoded":34525,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"26dc0a5fe35564f9e5fc0a5d1da5a188","sha1":"5c575b2b85a1d8723768dff760899d2d982179ed","sha256":"7eaf6f60290b73fc2d4c4122981f1b10e09337da85c42f73150a852a0745d91e","sha512":"54e6cb6888065e2b7e88bfbc05b1e17859794bdfed2ae095f368ef48e50a15411f78aa5a9629be20a776eab00c9bd2a0b5e83b673000bc020e0dd6762c1de4dc","ssdeep":"768:aJuiUUbpl9f8FPpMThOIscD+DJcJruzRxmpvXY:albb9f8xpwksruj8XY","tlshash":"6ce2e124121f40ad5a2f6d34219ab6b5ce8dceb1d341cf4357c268c0b7d667269ecae2","first_seen":"2026-09-08T10:02:07.222765Z","last_seen":"2026-09-08T10:06:21.054456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T10:05:47.591Z","timestamp":1788861947591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 24 Aug 2026 12:28:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIMSVWWZOfDsOiL2yz7uumywnzNasW%2BKfOodUQfm2yk2d2ew2aDmLoRK5ZVQdJZ9h3DlRFOgFvj5gXz%2BNdB52Y7ONO%2Bf4689OB%2BCDD9l3YqYTfHXtYuUB9q4zKw7o3SSuQ%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=60\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a37d2304afef120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90240,"size_decoded":23456,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65520)","md5":"b4efad8e6fe4ebb9e5f98983ac058f3d","sha1":"47390bcf4378f9cc6066c5d7446706b94a507820","sha256":"223521887be2f4c7aa04784ea9d1c97076fc4cc6c865dbcb114524c7ba93a191","sha512":"757fe2f30ac3a418b589bbc5c0354b8d18d883a3239988c4204e8a033ed9e4c6a0366d9544037b222a9de57ed312d55aa61f9a93156eeae810ec4034d3388947","ssdeep":"1536:mosNlHQ9XVtYX17yVBnacRfwx4seHgPYn851lPFJA/sEXlyfjcxDGVX5ExnLmp45:tmFjR9O3PHdag","tlshash":"cc93c68192518237947392c995e6b3b83cd6b34cd608c472debbe7e3669dc4e383251e","first_seen":"2026-09-08T10:06:21.055716Z","last_seen":"2026-09-08T10:06:21.055716Z","times_seen":1,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.561Z","timestamp":1788861948561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-fi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516861\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-bfe153eff252.bc1e3177.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.573Z","timestamp":1788861948573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-bfe153eff252.bc1e3177.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 10:24:18 GMT\r\npriority: u=5,i\r\netag: \"6a7460d2-7b84\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BstdLs3%2BWJfIYOuVtC9JAVHda6WLp3nNSEB5w9cQDFoqGQ7j6FiXOdJJ%2BIt2gfZrX7W6swh%2Fj8C1kr4VFfyADO5CoaLH1kxdzqp7miOghU%2F3rICbcK9ICx6H4yjIp3inFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31620,"size_decoded":32385,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"fe659d49904ab5b327dd68ead2812682","sha1":"207d7471b0764d3ec5059ca3a3945267788f7de8","sha256":"bc1e31778c1f29ba2927b7380b3223abf027855ae0d372242a230c35cf8cff6d","sha512":"ff7b5585b89abf4d35a038b813c17188ef5df781fb304e897a3618358a6e9a366c9dd93878950edd5330da0227508c4f4bcba88b9503536066b099ea4b12c127","ssdeep":"768:yXBDh104ORgEECh78pLgOKqpM4TNoykHeK9cnnYBSYhg5:qBDFQgE9hp182VrcnnYBlhg5","tlshash":"02e2f1cf8abb70b7bd1793e21811dad532b9ef0123c819da711a6cfdac90979704d066","first_seen":"2026-09-08T10:02:07.210355Z","last_seen":"2026-09-08T10:06:21.057916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-c41d0ba84a9d.76b07996.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.580Z","timestamp":1788861948580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-c41d0ba84a9d.76b07996.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Aug 2026 11:30:00 GMT\r\npriority: u=5,i\r\netag: \"6a731eb8-89e8\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPiaBobiwcG0opWXpKmguHYRrNgn0%2FpuS7u%2FmmxT0HW30wI2ZoS5GXbkaQxuD01vUAo1RQnnLTRgo628MmsxmpTzn7TarPaBPov1s%2FjAqzWFveHhGxA850X3j7zx3bAiew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a9961120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35304,"size_decoded":36067,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"2adc13d0c2b16f19a13e7a6bddc4d37c","sha1":"71e534f4dd9b35341202ae850dcfabd3503b9209","sha256":"76b079966d6ceb32412510d144f3b4788a55bc663ab1187372ebf36632dea1c7","sha512":"b725f4b5355df68e007594a67f89a6258f7cab301a372312455a0d10248cd3914a9e12f7f29b5b8cd5856a27a1f78318e57f961c3080d6b3c4bf15cd20c9539e","ssdeep":"768:tosR59e0KXxeUOiyXzZFEULeOa6gWnR02+2lFVzwFJUmmMYOPvSsE:RRe00xiiyrLeBWRr+WfzSmlMYWvSsE","tlshash":"56f2e12538e162f1c221b0a5678376da6d33be35d33210d195cacb5420cda6bb58f7b6","first_seen":"2026-09-08T10:02:07.193003Z","last_seen":"2026-09-08T10:06:21.059045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/favicon.svg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.690Z","timestamp":1788861948690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIuGr9wBWjbn6m4CmNUvvtgWkHS9bps89WzueXMqd1DvO8LV03aALq%2BokEqN1cf%2Bwj61hp3HKm0z%2FN0mq4CFIJBfYB6cnv6GAQw%2Fw6uwaY9fyrdrL02YjC32dqqAPUe0Yg%3D%3D\"}]}\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6931d576-364\"\r\nage: 255\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a37d230b5989120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-09-08T10:06:21.060264Z","times_seen":33,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.469Z","timestamp":1788861948469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-fi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516861\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":26,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-90a8462135d6.de0c444a.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.572Z","timestamp":1788861948572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-90a8462135d6.de0c444a.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 17:26:50 GMT\r\npriority: u=5,i\r\netag: \"6a6cdada-6852\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRRzuxCCbxeE9cE8YMVD5AuD%2BzKCFuE%2B4%2B74tPsCAbim6bFDBfChEbBHKokHtMEfCSck%2FbOx2DNceK1uBY6gwCyCMuucuidbpXw1%2B0ZkfIfg40aHZis5PkDQE40ijep0EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26706,"size_decoded":27473,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"8a1c1edb996c158d717395b5430421fb","sha1":"01b977c5c9f34e6679d9c1d74e73264215dfd798","sha256":"de0c444aaeb0beee91a593f59b7f56e48e51a80d834aeaaab2bd84dbcc774ec6","sha512":"ad73ac387e8da9d2ea4a78c740bb89122dbffdf0a1cc2d6bab056d708d5d30d9ba3a3954c307db0ee2464508107ffb267e80df28859d381dc8da0b19080c1fa5","ssdeep":"768:AXS1TsZeMZC6oHZCMiDxUbY+qwmIgum9/kMs4C0OPwp:AXSeHtDxUbY+qwmHumyj4C34p","tlshash":"1bc2e1e511c7fe868e3f2cf830e7a5836a55ea837042dddcb4f551e5d28408aa79a1c3","first_seen":"2026-09-08T10:02:07.18675Z","last_seen":"2026-09-08T10:06:21.060985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-a82b661bc3c1.176206e8.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.574Z","timestamp":1788861948574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-a82b661bc3c1.176206e8.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Aug 2026 11:30:22 GMT\r\npriority: u=5,i\r\netag: \"6a731ece-7523\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qp7CkQG%2B7T7bkNo0jB%2FKSyESf7wJTlEPgLrsTvypkqO7mSdYxzwgxFM2%2FaRINT3bYPkK37V82Muc30SHAs1e7fH0%2FXP4%2Be7kEwnyBm3ylGCjIchFxf7nTOzKwrxvLeAPHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29987\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29987,"size_decoded":30754,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"f8ba77b228f85f407b6b656da59fb78b","sha1":"b672321fedaadbd6dad937843c9d6a2ec844f2f2","sha256":"176206e801787b918dbf06b1e43458031e7073de0eef5f071a4f8a8515964384","sha512":"7332afebc86b080102ec8826f2fdf345a54bb887d0efe4bc6ea0e405a4861b5951ab6c0cfd26b5a8d51becee5b680a3ff06003907394b214461fb0a051277637","ssdeep":"384:xgfn0bARzMieync2lZ6Khue2eV0MpvH9lT90TFbSOT34emDRS5y+lwxp87SLloSp:Gf0bwwbAc27RCiwFxGDgEKwxuSLaSJe0","tlshash":"e6d2e1d5c7ebe14fd8d29ab4fafd0321526247a843bec776150244baf37060a2f8026d","first_seen":"2026-09-08T10:02:07.215965Z","last_seen":"2026-09-08T10:06:21.062028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-afae0b13d391.4cd6d59f.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.583Z","timestamp":1788861948583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-afae0b13d391.4cd6d59f.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 06:43:07 GMT\r\npriority: u=5,i\r\netag: \"6a742cfb-553a\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2F88lGAHKtkGo5WFCti4FyNzuHc9RUyDURWCUEH9pjtHLmjbymCG4UkXlH%2BEcIXwdBhVMcKvk8pxviicHTx40BELBNeL6vCQRRZrTK9OL29ywBhlSkqNHqmUrhePwlrbLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa964120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21818\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21818,"size_decoded":22579,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"a535fd3b75cac6a149a69c6efffeb2c4","sha1":"f7b77f0e7121dd08660cc98d385a93fba5e57e12","sha256":"4cd6d59f19e854cad2b3f3fe9cc14d1034455b645e0bfb7b5ee35985fbba2cc4","sha512":"b5b9bb4968eb1ff4d3a22b3f69e728a8db41edb009b377d0e962c171acd04dc0542ba7cb61365da474c702fe3b5c44e6a6bcacd42deb5f11829b9a2685160211","ssdeep":"384:2Ok2FQZK4nYdZkyV+/SexzVliDlCKpFwRXhsJ5DEJ32ZpuD9Kj3spnF:F/EyVeSQERCWFwRhgq2GD9u3KF","tlshash":"68a2e147f2fa48beb42a5c735bf7a995a01471da3001335da174acc69c2be921f4eb48","first_seen":"2026-09-08T10:02:07.206286Z","last_seen":"2026-09-08T10:06:21.063767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.343Z","timestamp":1788861948343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 10:05:48 GMT\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-09-20T12:44:18.307477Z","times_seen":19243,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.468Z","timestamp":1788861948468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-fi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516861\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-78d2acee10fb.58c91a8a.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.582Z","timestamp":1788861948582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-78d2acee10fb.58c91a8a.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:02 GMT\r\npriority: u=5,i\r\netag: \"6a7f271e-808a\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDqNpKPE8njVV2wFebjuJzSEs2NUQBY%2FVgeYSaxjd03x7lBZ8Yg%2BEqEnBBqU987%2BpBmRW%2F4a8JMBo%2BLsy%2Bo90WPEELgcUiC3%2BoKEQ2gspdUMY6OjlGBxQsXUiU%2FSzRoNqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa963120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32906,"size_decoded":33679,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"e989ed4e7768ee3e771423e6f4e485a7","sha1":"4852ad6de02152a9652f227852aca91e6eb58795","sha256":"58c91a8aaf9e8a8754006e4b1434b08aa5d67d30dacd9216efee8f97ace73c52","sha512":"4eb79687ac903070c038c1883f3e24d7c793894cfe942ede166f83b03090820c193a5fd177ca93d1553393aeb7c71dda3f46b542648ba35550d83b9db88d187e","ssdeep":"768:ujNyCphykloA3/jD3Zl8dMlpQQezzWz80HO8RMocQbeJXul:uRoA3/3Z6WlSQUzeH9Mo9eYl","tlshash":"f5e2f206399826f50a9e753ef549e18f6595dd0be51eacff400029cc167ade1f33460b","first_seen":"2026-09-08T10:02:07.204675Z","last_seen":"2026-09-08T10:06:21.065317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-7f618d1cad54.bb696bda.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.581Z","timestamp":1788861948581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-7f618d1cad54.bb696bda.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Aug 2026 17:48:59 GMT\r\npriority: u=5,i\r\netag: \"6a73778b-4f25\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmBilCyjock%2FdL6NYdKDe3cT4ye0UFDkVDoFGh%2BYoz8fZL%2B16uNgfr%2BN5V9h7v8eHeFC%2Ft7WATrfTLkFCtHPxZvi6%2B%2BlYIaWL11qpt9zYXcQrl6hP9CgQm470FqNG4BMYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa962120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20261\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20261,"size_decoded":21032,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"d1a134fdc96cf187fb84cf6b8680ff61","sha1":"7e929221d945e040ea17d72289768a66dc4509a9","sha256":"bb696bda343c5ac20af70e6f3c3f0a2449140cf6fdab9390681cbafe7f661147","sha512":"01523ffb418e371ea60d27b7a17c998b005d104d717390482118682858768a7e216ec33f8a614c7fb1f25d78d70b5a4edc967c4e60412385544d63e07243834e","ssdeep":"384:ZzSSy/w7J9hSMmiRVRmQ3ZgIjGxJrtTKXBCN0UCiW7uu:ZzSSawd9hvmixj4JVQCNhCiWiu","tlshash":"af92d1a8ab1a3bcf38b66730d8806319cda72510917c03d03a1dd9ddc5e7ad57dd62a3","first_seen":"2026-09-08T10:02:07.221613Z","last_seen":"2026-09-08T10:06:21.066596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/theme.a45e2159.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.354Z","timestamp":1788861948354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/theme.a45e2159.js HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 12:28:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6bUtXGAlWHz51U7fxXdI56iJYwCxvpdz%2BUiH9kPySIX7UmczLsvEYvJoEBMjrvbhKEd539v8pURyaiKG%2B8529MxM9X8BqYjapqzBhHkqNBcDJdXyfzq0Nb0qm%2FuKwDQng%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c38e6-1399\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230938b8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5017,"size_decoded":3144,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5017), with no line terminators","md5":"bf7b17b07582b89088c462649bf25b15","sha1":"84ffbfa566e728f0401496a4563df016a5b34b61","sha256":"a45e21591a80a99552fd189d0458e903071f96ef2a7bbe50b914b7fd5644b84e","sha512":"55458c768551e9264697c3e268d7aa2c580ed9237a487a6ac191c9503b887f554a42c3352d5e7234e9292f7835d6ee10b1e2eddf857c6a7bbb92e71f288e509c","ssdeep":"96:/mBAwVVDKi7wQFUByauiZvwKrZZmqSmY6jn1L/LH1LqAy:ORPFRiRbrZkqSAhLjHc","tlshash":"4aa175497d4270d132239ef32f3e1096c9219bc1e7c6459ee23da4989f2cb1d8a5bda4","first_seen":"2026-09-08T10:02:07.215082Z","last_seen":"2026-09-08T10:06:21.067387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.562Z","timestamp":1788861948562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-fi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516861\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-ea5335994fc2.bbd09e57.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.576Z","timestamp":1788861948576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-ea5335994fc2.bbd09e57.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 17:27:09 GMT\r\npriority: u=5,i\r\netag: \"6a6cdaed-6f70\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BkSJ%2BAKdPzI6AnL35E2yWrUc57mEudH3QiyqZR7r3%2FN3PBf5eXrAKxT4QEDOCYeBDSaftUWlf%2B641EmeHdMb7pfLOXQuJxYBUC2ZoGyDCyfQ7eIl8WTHlq9y4heRiPhdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28528,"size_decoded":29291,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"9a6fd95c742cdbd3dd2904ee18700e00","sha1":"e1c69ed4d64ca079030771d9f1b7290f9dfe4125","sha256":"bbd09e571c9e799ab45e11dd3acc4ae7035ad1711984cd8f9d873855310eac4e","sha512":"4225feb0902d99e56ff86b0117c60eb722d252c31f955aa1f293ab2dd397915c099199fd0193a2086655f0d1f8a514dfb2d0fe74bc548152f08548b4d3427619","ssdeep":"768:ccGnmx6AxRmilOlqPlzfSnmUzWiANgFimWdeBP1mebNu:ccqa6AxRm/lqPJmBzZim7dvNu","tlshash":"b3d2f1b6f55fcce12834ec14928c16a402cf009b80c65b8bfdc5aefa97430e7999462f","first_seen":"2026-09-08T10:02:07.199608Z","last_seen":"2026-09-08T10:06:21.068385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-dfc945df7532.a378e124.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.578Z","timestamp":1788861948578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-dfc945df7532.a378e124.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 16:17:56 GMT\r\npriority: u=5,i\r\netag: \"6a7210b4-6126\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsCv9S2QEsfd%2BXG7SLcue7O8RxA%2Bq5kvgtwXntTUOVRu9O9FmFXPTHCoR%2Fl55Vcq1EbcjpJuN%2BCWvtkAEa8nkaXlZHRACYSy1EiX5xifX0N3C%2BPJ14jCvMSmKgP8cnUmOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a9960120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24870,"size_decoded":25637,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"ec499842c6eedde4ecc6362bdce8c0e2","sha1":"d863b19a5aff89c4d4a925b9746f0f12f2efda78","sha256":"a378e1245e067076f05fdfdb314a708d8bf8970003d9b41450e6f576a8ddbebb","sha512":"3fcac98b74abc212732f81783c6bf355188e2c2dea5a56977cae49a3578c4dde848c9412663c54473a3683c716599ea54128827e2aa3c6e09a035846ef539a8d","ssdeep":"384:R4n82vTdkeSRLSmEBBj3miNyplYVUn4UQu28suhs7rL8luIusD6u2UMuHfu8Ys:Rv2bqZ1SXvmiil2U4fu29LDsDp9T2Q","tlshash":"afb2e1db7b1cd2b3e7163bbc4279c338d6aa29000b4ded9d358402e6989f9235d34a46","first_seen":"2026-09-08T10:02:07.203675Z","last_seen":"2026-09-08T10:06:21.068977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-a85307213b6e.67b1feff.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.588Z","timestamp":1788861948588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-a85307213b6e.67b1feff.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 07:03:37 GMT\r\npriority: u=5,i\r\netag: \"6a703d49-8929\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RF%2F9zpT0xFvoVexXGURqHGpqBiu2xWGfK%2FqyYbOSx6yLAnOrdbfzoguBz6UHTc8RFhEJnoxfDhPmbbfY0x4tr1eHB6svioTLddIAAHst5JOIMW4%2FETQgOiogOzKUUmq8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa968120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35113\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35113,"size_decoded":35876,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"e86efebc2cc28483a09d0a5f3a3ff260","sha1":"d84139b37935a18b60bd9814d1754334f9448d0f","sha256":"67b1feffd2e938a729922edc71509b529880e56cf1dd0b7084718c8a4b31d29c","sha512":"d1d59fec136ba73f1efdaf85bb67d9e0b3a76cdace12ba5d1da04107096566d0e27de229b8639f9520732c5cee6c1554a0fe8bf0c30ba6c154fff1920bb77998","ssdeep":"768:FZiezwVRHa8F+bgPblU+w4JlxEpEdilCCaUUq8T9vLPRQgr:FcezaObWlQ4xEKIl9UnRtr","tlshash":"f6f2f1d49068cb3bf43a5a559177792cf6f8f3011b938229bd49a9c641375b303871ab","first_seen":"2026-09-08T10:02:07.188415Z","last_seen":"2026-09-08T10:06:21.069946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/tracker.e69c01b6.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.351Z","timestamp":1788861948351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/tracker.e69c01b6.js HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 12:28:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRdtXsz%2BJIieyFFf5xYQBnQfwzS7mU0irAK19eGXWE37iMeVEykcG%2F26p56SIAZyPX0XYeBsO5HYJFrU%2By8neKRD1%2Bdz75kPN4a8Vp%2BPRP1l1M%2Bls0iScHF9XVAWMx1Wow%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8c38e7-111a\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230938b6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4378,"size_decoded":2992,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4378), with no line terminators","md5":"07efaf066ad2080ed97e67b6d2f17a5c","sha1":"587303c9380abd3f3ad44193c8982e3df3e15e71","sha256":"e69c01b6b4e8a90c8cee69436db4ff1bb8fcebd73888f21b8c4bdbbd734f8047","sha512":"c81d837af1c9dc3ddb2a11198527b0213e37b424f08f923a2bf05640fcebed2befe9a805581e2adc1f8f79a80787f9f0d4ba74af5d42933e0fe93ae5e026518d","ssdeep":"96:SIUITlZsEu4mBAOVdHnW2z84XS4QywgsYGLUA7g+PthpMa+Wu:SIUITlIvpALUOgoea9u","tlshash":"7491a3846e12b0d1332209e35f7e144f962589c1e3c5488ed23866d4bb1af61dfcad31","first_seen":"2026-09-08T10:02:07.214185Z","last_seen":"2026-09-19T07:38:53.858256Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.559Z","timestamp":1788861948559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-fi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516861\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/theme.587a4b14.css","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.345Z","timestamp":1788861948345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/theme.587a4b14.css HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgbuQizHmVhVzBdEBesN79k4iOD18lZVtpMvRCMvtT57h1APQ0mcEtqwPARQZONnWNVhJBERoitOqbGt3pxdZqIFjD4zCjJN4OXGwO%2FYBaNtq8fNvPR9WjMadj2ROCm6OQ%3D%3D\"}]}\r\nlast-modified: Mon, 24 Aug 2026 12:28:22 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6a8c38e6-13e\"\r\nage: 256\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a37d230928b3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":946,"mime_type":"text/css","magic":"ASCII text, with very long lines (318), with no line terminators","md5":"d5a1398153ae37bbe826994462d76ce7","sha1":"dabad56828aa96b4cda637bd737664aeb459d60a","sha256":"587a4b14a3e4c2f703dfcf8c2fac646887550f4c48e39c436bf9a9ac2e16a254","sha512":"7a12310d39f3e63c43eb53cfe9c4c65fef9dbabc53b8986090da4f5d8584767cf87afffb711a09fec1849eeb26d63f64c4545a8af1b6eb49377af3b939bc7b71","ssdeep":"","tlshash":"7de08612b92311640166d4ddb1ed6e9ff498a52353117cb79a4352f8f80eb18c1f0e00","first_seen":"2026-09-08T10:02:07.2132Z","last_seen":"2026-09-08T10:06:21.073128Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.349Z","timestamp":1788861948349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 10 Sep 2026 10:05:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4kYRySF7TPY7nb0KXw04JHdQ3Pyxuziw3IBreJU8mz%2BlDbyvFgN51xlZj0kAXgT9CQz8F4hSlx9Pxksd1gibNFEF6Q3L0XuNdZAQ6Ft8gMd5fd6N0nOMqdEX3bg5Y2PBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\nserver: cloudflare\r\ncf-ray: a37d230928b5120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T14:29:51.602845Z","times_seen":436748,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/site-logo.5ba7f3ee.svg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.363Z","timestamp":1788861948363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/site-logo.5ba7f3ee.svg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 18 Aug 2026 07:01:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrX9ynkU8whI6s6sc1wqB2YXIBzcAiZiCTC1Mgmno9sBNeLo7y5VBCIMLBXMF0i4KH%2FbH0xrG2xl212OxePaLbGZNmgJ5xr%2BynIl3Fq8dyL6jVySfQ8PsuzWFzvuhsDLgQ%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a84033c-1d31\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230948bb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7473,"size_decoded":4416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03f994da9dab3d241b517e503ad71c3a","sha1":"764b6d9619cf25884b96450af3943cdde3c09b17","sha256":"5ba7f3ee274a1d4c3fd58ab66bd9cf3c51650d23544a495f4e6cf96a89a2d21d","sha512":"5dd63a1e2ea5c065ff9545f3ba582cd9abe3163c4d631350fffb31678b9188f3c8abef9ea4d5e1eab38e6692cc14207ce181ea552a1a777ca30cdcabd71d7a2d","ssdeep":"192:cwcYBPIRrcf0t3sODKZwrfKBUiuOBlQBoeReXawR:mYJL0t3sOI1UdOcoOeq+","tlshash":"43f1c5ed2f714ed099ccafda7f1054ae2917d0f6ad544b08c26c5f5924ca86ced05d83","first_seen":"2026-09-08T10:02:07.219537Z","last_seen":"2026-09-08T10:06:21.0758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-cab687ab6267.c896fac0.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.571Z","timestamp":1788861948571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-cab687ab6267.c896fac0.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 17:48:36 GMT\r\npriority: u=5,i\r\netag: \"6a7225f4-76d4\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7qjOnLs4404U6ckPf9YSOGXrQ38kr%2F1cG%2B3p3vAngIWkepJ9EgL8m%2FpyqC3vl8gJtD91U7v%2BjUvuxplkBPCyofHC1YcsKUAdorEDd3x5iFSQHrTb7JGHizXkOUaOpybjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30420,"size_decoded":31185,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"475978472436884ae9e8ab6630958e24","sha1":"7a38d3641e2a7061ecaca0a459c267dd8cffc210","sha256":"c896fac00883cc1570eb6f06e0db2cdb5402ba58edb47d2e19090c8cd4dc9beb","sha512":"a568bacfd82d14ba7674ad6546f1250fff72bbd68b4d81196160ffda3aeadd6baa52a412acde797ce9d62d293fa309301e8d95407baeeb792bf9d74b9b63744d","ssdeep":"768:OYjFWNG3didNdFHDPDfUHKPRTC5E1+GTj:OYgAq/8HQTC5EQGH","tlshash":"d7d2f12878d499ede4f63c4f761be3d09e427963a8d34996ad6dc1d0233e5c0597ce01","first_seen":"2026-09-08T10:02:07.209432Z","last_seen":"2026-09-08T10:06:21.077458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-145659f0a38d.e308ad67.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.587Z","timestamp":1788861948587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-145659f0a38d.e308ad67.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 18:00:50 GMT\r\npriority: u=5,i\r\netag: \"6a7228d2-667d\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XxkT%2Fu3grwXzPzGU4i7kety7OhPYeZmuL8srAaUCOBngIWeYvnLFEsFIEWP68HuLvECNHzHIkW6sCKBOaxdBpswLrmBVLlLZwgDdSLejoWD97eAOcgIKbAoIAUb6BvKzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa967120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26237,"size_decoded":26996,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"ecd2adb166baa567786e0fe938853445","sha1":"dc23e04490db52ac4798d006e2a47d0e11e0f550","sha256":"e308ad67787a76fe3f5bca9a4fd947e06f86522f47be8dc2d7e110789200725f","sha512":"b7e8a0d9241c3de5a7d11ddc0ee33bad0ae0446ec014e9a7981c52161b3cc4d2cce7bbb0e3d5bebf84c040dc0468a17a76974e951567564c46e8b809c727ba95","ssdeep":"384:jLsu4XDBQryr0wPRaAcebFWxwpa9QUkSRcblJTd3FYkwkoQbfbxN3b9bfq:jLX4qcxRtcTxwy2lN1SkwHQz9Rpbfq","tlshash":"83c2e0469b4fd5a3c599ecf06eb40f2513da3b34a30a2b94c71684f5a207193cb89c5f","first_seen":"2026-09-08T10:02:07.194344Z","last_seen":"2026-09-08T10:06:21.078313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-6d42e71ce411.d0eb62b5.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.591Z","timestamp":1788861948591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-6d42e71ce411.d0eb62b5.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 15:46:03 GMT\r\npriority: u=5,i\r\netag: \"6a6b71bb-5528\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7FZlm8cdzHNSV5z7JcVMwBQAXvQ6KV2k%2FYx0I%2FbYZbrkJLfBb7VeLDfb3JqTLApPnPKAvq8Gwu2WkxTcfFLMkKRLNQ7tGpqPu7KRfcEtWGDPcSj48K4jKvaFuXsQhRnnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230ab96a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21800,"size_decoded":22561,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"1d835e64afa8578c6fea9a5d566077f7","sha1":"6df4343ca99246e6b907c6f192e05fd3ce959844","sha256":"d0eb62b53c173dc5dbf4aeb2eb9f14be97e99600bcdc91786b7502d623ab714a","sha512":"48e5b482505875f78a9266077ac1b266705ce373b30d21ee6cb204d1241728a7c6db7bfbc7f91090d5368dfa940378726e17bf805b7db0005ad1b1688b31c931","ssdeep":"384:Li8EesM5Lm8NUER4IXZe6dRIwXE+WQ21gVeDQgodcA+4AA/G6abAOI:LivePhR4IXRrXbWQsUesddW4AA/TaJI","tlshash":"e2a2d073412a8238c45018790da42671d856859e3af9435efed1e2ffb283c45a739bce","first_seen":"2026-09-08T10:02:07.207447Z","last_seen":"2026-09-08T10:06:21.079982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-aae91473add5.728598c3.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.592Z","timestamp":1788861948592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-aae91473add5.728598c3.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 15 Aug 2026 20:15:09 GMT\r\npriority: u=5,i\r\netag: \"6a80c8cd-63c9\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=isENpla8Rns1SwWlb4bh%2FB%2FDAIi5fki56DyXMy6dnGLzgKnqOwDy6ooO8cgPcYx20ipVvCtfkXvgmdjwbLKrfeHY4kuVRwEC3HMedwXQanLCzWfia4JlSo60ZxNXq9EuBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230ab96c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25545,"size_decoded":26306,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"c313a028f58cfaf7d3e5e2ea20b0b1cc","sha1":"86d892d6130588f0b4b77d5c68e2d4c87d3eeff5","sha256":"728598c374700aff8a8b9b34decd4d5c51529c97a4163e18c9105acd181248dc","sha512":"d01c3f8aca8384c955621b765308179c80e7dde8fbdcbbcc5f56924cb4194ac0253d009bb66dd725e9a7c483b54317bef11a21013e186808e4e756d398d11b97","ssdeep":"384:oqsHz4kuR20+9Py7m1D5vNIoTWKDZxtLzFAO92KVmTywZlmjdKeIrJAFW6eBv:Oz4kuR2/11DB1TWAx52O9gB7m5dc6Wfv","tlshash":"b2b2e1391f98bba004a587347b68b64894d6ce1b61c68fe8197530f86e36331fd50f6e","first_seen":"2026-09-08T10:02:07.189858Z","last_seen":"2026-09-08T10:06:21.080841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/82ff2a54755c.json","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.598Z","timestamp":1788861948598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/82ff2a54755c.json HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-fi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ct7I85BCF3mwhXgUBq9bNhnUaGS3Tij4q6gR7pnpH9GZRbhIFO199SghxJlEv87wdaL5uydvUB2VrJ6z0pVEaOcVN7m3kJndQ%2BEJDPEN1eCWCy%2FvdHrnEQD%2F9rOvHU6MBA%3D%3D\"}]}\r\nlast-modified: Mon, 24 Aug 2026 12:28:33 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=60\r\netag: W/\"6a8c38f1-6b\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a37d230ab96f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":800,"mime_type":"application/json","magic":"JSON text data","md5":"0583927ccdd5cc1f68aee2a6666e5905","sha1":"1ed39768d2999f30ad156f1b5d1fcb79509cbfcc","sha256":"c84a22da4849b20b3758fb6a7a9c8c474a6b019a6475b3d45666d75023fad5aa","sha512":"f02edfecf9ed0b71b835e05dfcbff7cb7b691ef3152f42c6792e20720243cc6a0760252378c1138c9d75b28358909b39d95bfba28a1f77587a09880ba3eed7ce","ssdeep":"","tlshash":"bdb09b7313ad3036436032c14507d00755457169cdc505d65557a501451c5590687781","first_seen":"2026-09-08T10:02:07.195854Z","last_seen":"2026-09-08T10:06:21.083076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-eee7218d74ab.88e34b3c.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.576Z","timestamp":1788861948576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-eee7218d74ab.88e34b3c.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Jul 2026 13:51:00 GMT\r\npriority: u=5,i\r\netag: \"6a6ca844-71a8\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BVDe8Z7UNH6%2B%2FQqSH5PTb2MDy2yhhphaCWcfalSm2R8n7Pwu2ypNvfzzlMg4vlsJkUuEED4imBaNPZ4X3v7e%2BM54YaqHtNc18Prb%2B%2BJ45nha7vnKxcSXtDT%2B2yPMe0s6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230a995f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29096,"size_decoded":29867,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"cfc197fb46ad0c3015e3bc4608165477","sha1":"0323fd3e7bf33613cd7acca79f6ea7149d9b0c9f","sha256":"88e34b3c3e83fa2c3f31150faba98dca4e42bf621f2c3768708bd50b8f97c229","sha512":"3981df14fd7236c039914d6b4f04e605f95e30d0486b50902373d53a9ccd4f23c1c863527bc3c500a8ae9c5d63d10ea8c8631461b9195d567a364dbd85f34b14","ssdeep":"384:Aiq2SWIrQU9iRsZxDmHSHdQjOUDKQm+ouF6cdERtAcwq+kYWH4DCqb1eniav94jH:fqxrm15FaRtSY4DCj5U9TrkX85","tlshash":"b8d2e12db82dd0038d26d25400a7334d8d3f9df89159e8e4736419e52b9fe62ea1d370","first_seen":"2026-09-08T10:02:07.202304Z","last_seen":"2026-09-08T10:06:21.084769Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-28a7e07a78e2.b5742ce5.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.584Z","timestamp":1788861948584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-28a7e07a78e2.b5742ce5.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Aug 2026 10:02:22 GMT\r\npriority: u=5,i\r\netag: \"6a730a2e-56ef\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vS%2BaEHUsmxUulxi2%2F5lA0f3od3hrP3rOrcCVQW9ZbQOs5maDx6wGesBv26Hczhs3It4F2uUk6xbIB2ncBIUYaFAnlioOo7SKtmVY8NQi849h5%2Fhv%2FsDcQv6%2FHZ4E9dEpnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa965120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22255,"size_decoded":23022,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x210, components 3","md5":"5849e4d7523c42f4df1df881cca9501c","sha1":"168f64b71b4cbfd15b0c63cbf49947a4c059e283","sha256":"b5742ce5ca1cf5784a06cc1157cea3e0ff3094efc3bb2c178dd8be6faab96e49","sha512":"b836e5dc03125f6fb01ff08a541502827b00469af6c26c5fccf4d644076cb85d7a7df81a57ee049d11cf8832bd9980f4aef736f5513cfda000ffdc019f24827b","ssdeep":"384:j3UL0VkUzmgk33m+eRQ/gVpvMQLOn188slpSCVTrjPzqB1KX:oL0vHa3m+eRQ/ovDLpZL5qBUX","tlshash":"c7a2e1669997b560f97feabb0651af310d1742136d73e10d408b53fe4e8a135b30928e","first_seen":"2026-09-08T10:02:07.200714Z","last_seen":"2026-09-08T10:06:21.086575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/assets/game-701f44930e1d.2541dc03.jpg","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.586Z","timestamp":1788861948586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /assets/game-701f44930e1d.2541dc03.jpg HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 13:05:45 GMT\r\npriority: u=5,i\r\netag: \"6a6b4c29-83e7\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 256\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvkCYcLThgMA2hAfHPeJT6pSGocmC5U49H8FfOfLr0mztsjy3HjSz4JQ9o76rt%2Fdl1Mlo7DozhiizOzkTrTgfZWG4u2Ka82G0TCOHJAl%2FqcMzTOfZ07j6l8Sb2qPm6q%2FGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230aa966120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33767\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33767,"size_decoded":34530,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"cc9699fcdb1c1de95a579d6b07a63684","sha1":"b85b9a842f8bc6a655316db2fc4471aeae1b577f","sha256":"2541dc038454dfce89c41467dafdc19783a3a84264d7666c91bdad7cc440fa74","sha512":"f46a9a788cae282ba78bb68618f5d801af09302aeb4d85b84a429cddbbd4fd7163c364f1c7edb22ec1382298b3164924eb36d9c7fcd9cbf419e368a8e372e021","ssdeep":"768:XgmW7y7QyguP2Ivf4E/FHIhQ3QkDc/Czmk6y5Ag82kvZlJL3s:XgyP0QBIwrtt8NN3s","tlshash":"07e2e0cfb925b534d9a6090c34bb52d66da32f981562c62e3d43e0ed47b059b10f3b9c","first_seen":"2026-09-08T10:02:07.217089Z","last_seen":"2026-09-08T10:06:21.088144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-fi.com/favicon-96x96.png","fqdn":"rainbet-fi.com","domain":"rainbet-fi.com","tld":"com"},"ip":{"addr":"172.67.196.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-fi.com/","date":"2026-09-08T10:05:48.688Z","timestamp":1788861948688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-fi.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 11:55:49 GMT","end":"Sun, 11 Oct 2026 11:55:48 GMT"},"fingerprint":{"sha1":"35:42:42:18:B6:D6:97:D1:DE:6E:7A:A7:53:88:AE:60:DF:03:56:96","sha256":"27:58:75:65:A2:AD:C3:C6:36:E0:9C:35:59:90:A2:19:68:8C:7F:EE:C7:86:FA:71:FA:BB:D9:F1:59:E5:21:8D"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: rainbet-fi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-fi.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-fi.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 10:05:48 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\npriority: u=6,i=?0\r\netag: \"6931d576-29db\"\r\nexpires: Wed, 08 Sep 2027 10:01:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 255\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAuQuWZ6jpOtzt6OLde%2FAvP9oIqcwMY6NShogciXWXNiM513a1dymdIB7e5YyRWZDxsna87ErQXvxp%2BGFZplwRu3ei49%2FXf8%2B8jUw9azauM%2F8KDgdyrrmMzSMngTRpkJyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d230b5987120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10715\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10715,"size_decoded":11484,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"182514122e9e227f781f6a8fe95a751b","sha1":"73929440eade5d7ecc96472ba1affc694f18100f","sha256":"c409bef0136cf636108fb10dfc589b7108b2ea9c583a085bce8c97ca6e6f7ce0","sha512":"b487266aae315b01f9c28208877961b7c31fda6de006978c5aa4abd75423749fe0e34dbf61a13738dd9712edf4655acf8e92132a4c1b75cd2352d9f4b46631e3","ssdeep":"192:EyQkfr6b1GeJi/J1nYraNvI6xEeLoYlL7dA2pp1zdAqpS/bAr5vouOs7v45Ap+:EKrcmJ1np3xEelLJA4plSYo1sd+","tlshash":"cf22b09ecca3076dae37a43d3816782c45ae6dcc4bc460b5c93d0ffada124a04257b58","first_seen":"2026-09-08T10:02:07.208302Z","last_seen":"2026-09-08T10:06:21.089938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"rainbet-fi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-fi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}