{"report_id":"cda403a3-4f2a-427f-8978-1266a09cfce7","version":0,"status":"done","tags":[],"date":"2026-09-27T02:37:28Z","url":{"schema":"http","addr":"rainbet-de.com/","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-de.com/","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"title":"Rainbet Online Deutschland Casino — Slots, Aktionen \u0026 App: Spiel, Boni, Mobil","dom":{"size":96658,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64814), with no line terminators","md5":"ed2447065ed0c4223cd50a4edcb08512","sha1":"3e91da0c53c53cbf0c82cf0702b1fd012b83e8be","sha256":"ff43d0db73fc6233b3849289145b4b7a8ac51a45d22c8a80b4cecd09ae24085d","sha512":"037cfa2f86be5e2087e4e06acdac15dd371c8f2c132a7f25af173ff87de397878a1a0e15a81e1ef327d57e891c0e937409fa5c5f5c30bf0088d90d156eb96b06","ssdeep":"1536:o4eSieMzevuec4et5ezfeARe/reFtemle95e1leXV6e0ey3eaQet7ew3eyieyMed:6VvA6KXnEmJ0bEmW3/eaLjh+H9BnJh","tlshash":"bf931a6360d2622e822703dc72066b7632aaf35dc3452234c1bef3b3975ed75786d46a","dom_hash":"domhash66f02973107b90d6af3ce3bafaa2cf75","first_seen":"2026-09-27T02:37:38.109403Z","last_seen":"2026-09-27T02:37:38.109403Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-de.com/","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:37:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":11817,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbet-de.com","ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":62,"request_count":31,"received_data":1803716,"sent_data":16592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":5,"received_data":118457,"sent_data":2771,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-de.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T06:36:48.481088Z","times_seen":455211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/kit.9b75c432.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59bf1c7d486c5ee55db1b2d90902c798","sha1":"9ff369cd75007b45b774b8d050b31ffa6eb1e769","sha256":"9b75c43261335eb2764ba1fcab3fb13fcd395ee420da76ea1d9b5b3c405937da","sha512":"59d8fd9da24738d344039b82162f03d6611d5188b21e2c7c400aa36a6c24396702cebfb7063489268fbb50268f2747e7ac65e202bd090b90c55e57bcb4eb5943","ssdeep":"384:bh7lKoHoJoC5yQHFI5fd7QNdqknP8FrH6:bD79MO7s0kn0FrH6","tlshash":"1c72858c3f42e187377ea4b7576f009655245e5ace4dc18dd320a0682e3cb68f94be5d","size":16508,"data":"","first_seen":"2026-08-29T01:42:49.763919Z","last_seen":"2026-09-27T18:41:18.263433Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/tracker.01687f91.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a81d83020e048b57e52073a64fdbab7","sha1":"b73dba57d1f288fd43219af6a733bc2948dc81a9","sha256":"01687f9115da25ff9f9f6fa9023d77fa2f4c2b4f959db8cc6574b00e480d0599","sha512":"0c9a0d1f3ac0e65c2f3c08a9641234ce70d7de97b6071fbfcc3bc435e628a39b49309f9d7744ff7c529814ed77f23893581f93c8a98cadf7e4f3f17c7212ab2d","ssdeep":"96:z2mBAJVvnPin+LNKZfqk+E+Qr8hnmVwDsMi/PbLSMpSVOk:h4hPA+L0p/6MpSVOk","tlshash":"879164897f03f1c073668ee72fbd644b8229ccc087c518d6d531729cba26f61ea5a911","size":4387,"data":"","first_seen":"2026-08-29T01:42:49.748883Z","last_seen":"2026-09-27T18:41:18.321986Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-de.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.554Z","timestamp":1790476618554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 29 Sep 2026 02:36:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyWyuaFFWa7nSERY4QECpHTMBf%2FwUCL9wx7dRCc9DNm9ZmZNgitBzNQUR1GS6Aax2jPqerLF3PQQ9KO6rZ1riOXaZbQJ0cFhwd1NzWPX3CxNbgD9d9%2FNS6RU3NP0URTH3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\nserver: cloudflare\r\ncf-ray: a4171fb1fba756a8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T06:36:48.481088Z","times_seen":455211,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-f550e840556e.caf1f7f6.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.818Z","timestamp":1790476618818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-f550e840556e.caf1f7f6.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:08:59 GMT\r\npriority: u=4,i\r\netag: \"6a85c70b-64ad\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVqIuoer7ojs0m4cChd3UwvlJYCcbserszMWRsQISh6Udp2uk5ykJMS%2Big1AFLSgD1T8oqLMmdEO6TojdeBo8wiK%2FF1gwbHwhFSHPQMkyEeOQUWQ9xx6EECdoFyR450iVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abd056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25773,"size_decoded":26536,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"f195306ac866d186193447422cb4c1f9","sha1":"0a7f01d1cf9d6910fe3cde1dfdf93ab74efd50b7","sha256":"caf1f7f65bd7d5be452d24315b4b05d4429dcf9cbaff705a92f1b89207cb7602","sha512":"4fcb90860c8732c841cdc349cc2535bcfd17fbaebeda28e54592be74eac34acf3ec2d7cfb01be353794ce3c4510bc32a95f3ddf1394cd80bbc8718f626eb207d","ssdeep":"768:qyeYxLFF85J4NwUBnrQ973kjy4gCkM9h8AwKUY:qy1LM4NR1+kjy4gCMQ","tlshash":"29c2e14226189c997038c7f1355b1ff9842c6fd274e4299922e232dec077591bde8bbc","first_seen":"2026-09-27T02:37:38.113243Z","last_seen":"2026-09-27T02:39:25.467511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-cef37ca524cc.5de9cd8b.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.821Z","timestamp":1790476618821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-cef37ca524cc.5de9cd8b.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:01 GMT\r\npriority: u=4,i\r\netag: \"6a85c70d-697a\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahS2pTSLCaawrMJ3VJ24og%2BNtHWX134t1NW%2F3QCwZJymTyWqp443XhvMJecZu0Vft5SfdAXzQra4wvouRT0WHfvWrpryXpVkEpHuBPV8gfe7FJnLKkltsgCtGpejOXCtPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abd456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27002,"size_decoded":27765,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"41efcbfba587397f08bde9503caae880","sha1":"29ac56357a7f798f2bc546e9677aa611b49565f5","sha256":"5de9cd8bd8642dea75edee63658b27a470b8f398980dd1cfa4cfe8ce78f8c30a","sha512":"d514f72d7e35c35448bfd5697d938e04f3adbe98a55d55abd35dd5243688dbbd5496637ccd9a263a719e9ebb0d0865def7ca401ba426c031064ab8d33872392a","ssdeep":"768:yf9OPFbFsctIzrWoVL5CGOVaVNG4Ogvfts/sy:4meoIzKamVajpOgNGsy","tlshash":"74c2f11a9b485e65bc2021a8ef8a7f7007cc78354df57df6ee0862e7668ed5ab342110","first_seen":"2026-09-27T02:37:38.115814Z","last_seen":"2026-09-27T02:39:25.488108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/player-de6fdc2f2dd6.551f9227.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.837Z","timestamp":1790476618837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/player-de6fdc2f2dd6.551f9227.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=4,i\r\netag: \"6a7f271f-1ae4\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EwED9Ei8%2BZwfwDoeXh5oOdBtgRjrfheACwyYSVAi2Cm%2BY716gVYnjWohVrHWoUYOKz57xrrbaKqEveNNs64s6p6FBYUvlZ7f8dVqIQySx5lp7MBS4AtHFRiBnZARYcmWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6884,"size_decoded":7646,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"62b1e6f66f7cd1a98225f22b02f34a35","sha1":"4ff4084f222d0103e7378c34f937c7223120380a","sha256":"551f9227a96a162de1fc7a1a48c4efe6e0f41b81f5d38c5f06e94cc20a8f5117","sha512":"f28052c3e8a219734f09118d7036f89d87ccb5818965570470caa1b87a0697542ea9caf6706cdddc7239613e068ad1778e24a0965e99735f10db65eb29affcf0","ssdeep":"192:86R58NAKchaZWSfmXQQZwSh9z29k+USOsPVhlTqKHT:ImxwrfmFwW29k5SxluKz","tlshash":"48e18e776a61cb60d73f2432bb6342541f5df638a07906b2ace15319277e0e0e23a17e","first_seen":"2026-06-11T03:08:59.180883Z","last_seen":"2026-09-27T02:39:25.490034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/player-95c71f8eebc9.3f9ea493.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.838Z","timestamp":1790476618838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/player-95c71f8eebc9.3f9ea493.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=4,i\r\netag: \"6a7f271f-2580\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdQD6gwLKeRJOwfCKfs3rm8jklAmxpBoPvWW5oYqABlml5OINwJRmDlFepQkFLy1oqLrc%2BMnlXfVTSKUoFVMxEjatFrXnijO9qWVvf96Moxy1tn%2BX6Oxti4R%2Fw1QpWsrYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9600,"size_decoded":10364,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ebc87a407ab454faeed02e9eb79dd834","sha1":"1e43ce13e7b2ca12b8cf26172f1eaf348ad2897a","sha256":"3f9ea493f625e869eef018430e14042d40426dd496ce825bac8ea7b9a2aa5bbe","sha512":"b51dc77fbe002706c93ff432c7374b5a6ea8b4d81d23c0cba4916ec65928b0f41a8ad6da3c395c8609b546768a66be8a045812c488c9e7b57ee2bf0b15c52ce5","ssdeep":"192:ND7XsEa8SJ14REv6HCudoFK/HJYwD8I7DZ7kxKg+HB+qsDrrsSE2IoLAFT2U:CIREyHCudoW+XI/ZYxKg+h+rs1Fx","tlshash":"fd12ae5499092841e5fc24f8e79e9011b3a9246e02434ccdf8f6bfd62b0e446c8dbc18","first_seen":"2026-09-11T23:22:54.88423Z","last_seen":"2026-09-27T02:39:25.491941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/favicon.svg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:59.106Z","timestamp":1790476619106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qo9c8APsOmrin27VCtYnnPi1lXXwbviN3kg7y47rSOyrw0U9BWQwl%2B4NudVVBI1JSGVj6EB6uF1qH8vyIZk8ARfqZgNc7WgpAYyK%2BLdOHhqVjIKNqujWittnDAlniI9LRA%3D%3D\"}]}\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 27 Sep 2027 02:36:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6931d576-364\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a4171fb56c4156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1375,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-09-27T02:39:25.487052Z","times_seen":35,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/kit.9b75c432.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.555Z","timestamp":1790476618555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/kit.9b75c432.js HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Sep 2026 11:19:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwh4iXbrmpuBYCPPgBw32iJuiJ9DtDqZ1o2GYfCM3CYSuo4Zo%2B5%2B%2Ba659j0BZuquuDdA3RWkXAnSHcqYsyeosJZnPGXxX%2FZcylcuvOW7GtpDa8iLGiGG71HOkgdvM%2Bswig%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a9e9db8-407c\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 73480\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb1fba856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16508,"size_decoded":7777,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16508), with no line terminators","md5":"59bf1c7d486c5ee55db1b2d90902c798","sha1":"9ff369cd75007b45b774b8d050b31ffa6eb1e769","sha256":"9b75c43261335eb2764ba1fcab3fb13fcd395ee420da76ea1d9b5b3c405937da","sha512":"59d8fd9da24738d344039b82162f03d6611d5188b21e2c7c400aa36a6c24396702cebfb7063489268fbb50268f2747e7ac65e202bd090b90c55e57bcb4eb5943","ssdeep":"384:bh7lKoHoJoC5yQHFI5fd7QNdqknP8FrH6:bD79MO7s0kn0FrH6","tlshash":"1c72858c3f42e187377ea4b7576f009655245e5ace4dc18dd320a0682e3cb68f94be5d","first_seen":"2026-08-29T01:42:49.763919Z","last_seen":"2026-09-27T18:41:18.263433Z","times_seen":12,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/hero.664cf33c.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.562Z","timestamp":1790476618562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/hero.664cf33c.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Sep 2026 11:00:56 GMT\r\npriority: u=5,i\r\netag: \"6a9e9968-82a12\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73480\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2uNGAra%2B%2FaHFonO%2FIgwfGlzTXOVAoCsacMEOSW%2FdrT%2F9Qk%2Ba%2F8DEWFP11dv0bHz6oyIbVIjAX0K90ACh%2F7ZA7fSx1jjSRJhuJ8ciQ7N0DXzDLQQC7yDC%2BmI3k4i1nSDig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb20bab56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 535058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535058,"size_decoded":535837,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"3889b11fcbe95f36318a7bc8ffd3acb9","sha1":"a3d0a2704a0e1870e48e8dcde8c60906c694050e","sha256":"664cf33c5f45f4d7e03a4a74f9e52b2ed972897804de67e32bf198ce3076784d","sha512":"7006b72c240372ff222fb8c43f702b7f331aa24723271bf2592db19847cbec7552aba1c31a2d24e91b1a171fb256ca25571db615e19e6076efa650f384e45777","ssdeep":"12288:LhI9xoBcuTh21Xw1UZ5mMW/zVqH1u5GKcbB5nDzxEmayg:L2riTY1g2zk/BqH4InnWmax","tlshash":"11b423dbff2368db91381950f4b7de5d7b286b7734058d06a306ac80ea6cdc5120bda5","first_seen":"2026-09-27T02:37:38.125618Z","last_seen":"2026-09-27T02:39:25.470673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/banner-2.d0efb379.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.563Z","timestamp":1790476618563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/banner-2.d0efb379.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Sep 2026 11:00:56 GMT\r\npriority: u=5,i\r\netag: \"6a9e9968-98972\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73480\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WaAYkKms6tNSABmuNDKC%2Ftzy8zBthiwNHvCDMedGcuB7Y8XH0iZBBvdGCyJSD7bB7BTp1EQzUsxYTe4UJzVMsLDau9dS51VvHly%2Brec%2B3I8U2S0kRgDq%2FhVBvHZ6fVPbjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb20bac56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 625010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":625010,"size_decoded":625779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"9b7ce34b8f892b4f55d1baaa10e20d8d","sha1":"907a9f22a741127fc57cdc1b6326f9f563c48fe9","sha256":"d0efb379640fb716f86e619a6c5c3a4826d7c4a2aa5c37c5f3cd1690658a825a","sha512":"e43b388b6ba5495c4b8b56378bb4cbc323eeeedbb90e0713d296b0396f9f9a0862bb9a9eb5bc62c15fdd6415df18580344c33bd04b64e43a0b45e617b59818e1","ssdeep":"12288:ZSSjt5PyeqZyLzGv8OYKUm7Fhi2YPyoT8Xehsk9nIK:ZBt5PvvGtLXBLYPyNrGnIK","tlshash":"a4d42348fdf3ca61abac6677744a5d8977ac7b0436ebb124625157e1da6e00bc023cb0","first_seen":"2026-09-27T02:37:38.127099Z","last_seen":"2026-09-27T02:39:25.471771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sharetech/v23/7cHtv4Uyi5K0OeZ7bohU8H0JmA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.770Z","timestamp":1790476618770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/sharetech/v23/7cHtv4Uyi5K0OeZ7bohU8H0JmA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-de.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:21:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:21:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:22:34 GMT\r\ncontent-type: font/woff2\r\nage: 468925\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15048,"size_decoded":15861,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15048, version 1.0","md5":"063f996268878af20d0bdfdd36a36192","sha1":"17a5167b520261d8963a2dc95e4c8a930bf33a93","sha256":"0907d6045312b73d5afdb7c6b7bfff8dd5eaab56dbcf6ba7d72dfc6af118d8ef","sha512":"cfbb3764706e5d58e2bd2403ff770b32e270e752ce1dde619b04542dbce60dd3b5cecfa8c31cd73e920387bc9ea96ac54c44a69fc6915779e2037ce0cd827b24","ssdeep":"384:+SL20PiKqaaQgczjZUzKUDIo21b9b63neYHnFvwJeupyN:+SLYkDZBUsoyb9OXeYHnSJNs","tlshash":"5762d074c946867ece8f72d2e2d3d5ab6b0f94225ed0178f3c115f7c6888a4167eb504","first_seen":"2023-05-08T18:46:10Z","last_seen":"2026-10-15T03:00:20.504045Z","times_seen":342,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/player-e189d8984143.24857056.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.839Z","timestamp":1790476618839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/player-e189d8984143.24857056.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=4,i\r\netag: \"6a7f271f-b3a\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CN3IZAmSIVpHidjEVBUDu1krNc93utYDpOBlL1FAO7jKiY5WQyDGCxbu%2FGvA%2BBkwf3IhN%2F1IsfPNYovJgROu9IdUo0ABq3y75vD%2FOyyc%2BtaX8W5tURwaZcJR0CDHx3pXZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3cbe656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2874\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2874,"size_decoded":3641,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a6171c792f8787d363dd329617fe1693","sha1":"947cd224afd5b2635ad2e404cbbc2a6d1a464c9e","sha256":"248570563284e2fd1f736fd4cfdaf3461cbf461e691394089350d93e6f86a38d","sha512":"8444e050438d9606ac2531dfcfa99edfa2888fcafcb5e86ff46dfd109e15a71e9aa8649fe717aa406a3065c37b416509a4ca78a27a4ff86c255046646d5496b3","ssdeep":"","tlshash":"ea5109b667619404ec2f497ef8e4919fc62e9e5483401b9b4c36e52a9f2f600a6440b4","first_seen":"2026-01-01T02:38:41.217999Z","last_seen":"2026-09-27T02:39:25.495764Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-768bfa7e6b63.5bad8bbc.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:37:14.531Z","timestamp":1790476634531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-768bfa7e6b63.5bad8bbc.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:37:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:01 GMT\r\npriority: u=5,i\r\netag: \"6a85c70d-693e\"\r\nexpires: Mon, 27 Sep 2027 02:37:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIcxM6IK9GMzplJah89FywvdGSI%2FC4y%2F2y6kzLYbOXKs6tDDfgin3h3hvvJFen16%2FaVk%2BFRUWAHxS8%2FUwIRgAGCiiHytko%2FnoxCY%2B2%2B%2FSKGr8CkiHKeovcXDlRhx7pr9MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4172015df8f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26942,"size_decoded":27708,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"51a721c43f6bbabf17e43ad005ffc673","sha1":"fd9c838b1770f065e462be51bde3b36cda16e6b9","sha256":"5bad8bbcdded18020829063b9db4950808339fce6b020dc74e3bb3a1bffed168","sha512":"ff6da40a1871c6d827e6fb50eb52a76237041d6dc1fc0026fba0c674e4d8b76d9f91e746c42aed955381a95f13896d583341214895afac758b7d72493f03c376","ssdeep":"384:EaO0wlbEGptDeocsNDKnArFF0/9/yFYVj7yv+3InKKXX9FB9JQCP0qb/1xWecEQP:q0wmMDeoiAT0xyFY9snKKVd0T6I","tlshash":"53c2f1c53d70e9f1f43661518e60077d0f92840bfdd96196245780da3b7f63a3be8a45","first_seen":"2026-09-27T02:37:38.133376Z","last_seen":"2026-09-27T02:37:38.133376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/tracker.01687f91.js","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.557Z","timestamp":1790476618557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/tracker.01687f91.js HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Sep 2026 11:19:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKOdbJYJGpyu9qTrfFq6%2BFf8nO4GhnWPjI4lkt123MwMIsWETegtAv3hW783kpt%2FA7miNWaAM4ULcYAOXTfJhv3vOezfl5j3dwYPclcXk%2BjgNRbr0C3XJfCik9pxoUYwXg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a9e9db9-1123\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 73480\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb1fba956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4387,"size_decoded":3048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4387), with no line terminators","md5":"8a81d83020e048b57e52073a64fdbab7","sha1":"b73dba57d1f288fd43219af6a733bc2948dc81a9","sha256":"01687f9115da25ff9f9f6fa9023d77fa2f4c2b4f959db8cc6574b00e480d0599","sha512":"0c9a0d1f3ac0e65c2f3c08a9641234ce70d7de97b6071fbfcc3bc435e628a39b49309f9d7744ff7c529814ed77f23893581f93c8a98cadf7e4f3f17c7212ab2d","ssdeep":"96:z2mBAJVvnPin+LNKZfqk+E+Qr8hnmVwDsMi/PbLSMpSVOk:h4hPA+L0p/6MpSVOk","tlshash":"879164897f03f1c073668ee72fbd644b8229ccc087c518d6d531729cba26f61ea5a911","first_seen":"2026-08-29T01:42:49.748883Z","last_seen":"2026-09-27T18:41:18.321986Z","times_seen":12,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-6d249513e5f1.75343d9d.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.825Z","timestamp":1790476618825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-6d249513e5f1.75343d9d.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:08:59 GMT\r\npriority: u=4,i\r\netag: \"6a85c70b-734a\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkcrHOoDjfNEPHaZUfvnv6tqN%2F3ZmgifaC9OsasUxUr%2F3CYiV4llyCBIevLddx1eiKhlNpClM3WpDXbGWtfymioQMz7Pbjaa8atW7kwpXhqxeLd4j%2FcXpU1eTdJh8D3UIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abdd56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29514,"size_decoded":30279,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"cf484d7650c3befe194440ac1189a1dc","sha1":"310c522dd761c5b6d936addbac666b294b3dd834","sha256":"75343d9d17e86d4a9a9ab69e876884cbddcbc4369524d5cb948b490e058e2c42","sha512":"22615adab79cfeeb5a74d9a623ed472285ebc01308dbc21e8754726b88451f455c79de4ae1f5c172f77b43b83f498278b190f4d5fd1a2ebcc8657321ffc9b3d4","ssdeep":"768:jt+hk4mzHmCNJn1m7IVq7FJ9fZEkWUep4eozA4YAbJ0CKQGJtnrcXG:5okjHmCHnKIVKFrxEkWn4eoylJ9+G","tlshash":"0dd2e00fca3236e44fd8527aa5d22b647de162c80cb55da851867cf0faca5907f8cb47","first_seen":"2026-09-27T02:37:38.139642Z","last_seen":"2026-09-27T02:39:25.474194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/kit.342d29e8.css","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.552Z","timestamp":1790476618552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/kit.342d29e8.css HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Sep 2026 11:19:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7mMU%2BFZca7NBlXxoHQaSZNVmp6dHbSBZXExGjom3m%2B4rXldtozSAxe3nrGy7qdsh74jnwYeKjHzl7nUcDnQKP63t0fjYfhneZGiYXmx37nxE1vqXK09Q3sPrztwX2TkXw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a9e9db8-ab90\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 73480\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb1fba656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43920,"size_decoded":11939,"mime_type":"text/css","magic":"ASCII text, with very long lines (43920), with no line terminators","md5":"6f7be3cd294dca576335267fc3177bf9","sha1":"5bdd7b3aad6f69087e7118e0a9a89ed328bdee23","sha256":"342d29e8ad2843310cbca63063a86f722ad2c09237ce38cf7c56744ebc40f307","sha512":"6e528c20e54c440215e4be07429142d57ecd689d78f0b5c1f86e003f31e2d79f9a5ab21c8db41776b3a8328f5ece48a94261b9c729306153a96f5331a76a0609","ssdeep":"768:gDLYPDX+79CLaIks9T6F28TodmbjJ0Q99UX9Yp6QSWmJZO+6r:YLYPjO9oaIkssF28Tod4J0QXUX9Yp6QJ","tlshash":"f813642567152279bc8beb6c3fe9db4f7369d003d501567db8da205482ce3f8462be82","first_seen":"2026-09-27T02:37:38.142617Z","last_seen":"2026-09-27T02:39:25.479294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.697Z","timestamp":1790476618697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-de.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:57:43 GMT\r\nexpires: Tue, 21 Sep 2027 15:57:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 470355\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T06:33:43.91145Z","times_seen":50085,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":44,"send":0,"wait":30,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-50c67d0b4752.f683473b.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.817Z","timestamp":1790476618817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-50c67d0b4752.f683473b.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=4,i\r\netag: \"6a85c70c-7804\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgKJBHixdqMRMQ8zuImemAqR%2FQtf9m64jAiGfqLhWs5vynNrhvV7aT8OqYbGntS9OlGaDLabJVfL%2B%2BNE%2B38fQbHnfPPscG%2FwejPQUtZ7P1TDpgk6gMUe9hQ94AvHhOh4bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb39bcf56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30724,"size_decoded":31493,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"93a7a7fd28e7c21b314ef0b17d6c7004","sha1":"efc2def001434f846e49af43fef4a63b98e11fda","sha256":"f683473b702d8704ca8247bb0c1df5a17399bd022a99e696c896e653c1349c9f","sha512":"6590e8d3d965533ce70f19af261814beaaa7684705c9065f047f144a4918fbef220853feab84294de246ed3a0797501e33d20035796047d3ba4ba0f8d17d13cc","ssdeep":"768:4PkeZ1oSaHsVXLHYR0BimbdEtR1/pE48ISG:4Pk+1oDwMCBidppgG","tlshash":"a8d2e1214bda448ad1bb155c1de733fc7af82497026a6bcf924391cc15b8f8e272bb51","first_seen":"2026-09-27T02:37:38.144901Z","last_seen":"2026-09-27T02:39:25.46599Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/player-932c49b884fa.f28e3997.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.842Z","timestamp":1790476618842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/player-932c49b884fa.f28e3997.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=4,i\r\netag: \"6a7f271f-19c5\"\r\nexpires: Mon, 27 Sep 2027 02:36:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmZa3263Eep%2BsjNQDTkukYJ8XhUnTSa4320eGMCKQtIyF4zgsbfvaEyEUJC5JcN7ubJ7E9HUxEzP%2FetaMxRwZ8EvqzVi614iZk3pIBfZVIqRnT%2FoftqXI%2FOQTdl%2B%2BAVPhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3cbe856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6597,"size_decoded":7356,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"48f7ac419887c21e89417275eac38ac8","sha1":"0b78d2c448ae974d1f96b50bf18697315d7aa233","sha256":"f28e3997b18422a2eb991054b84704e8e23dc345721010b62f810a01f05d8a8d","sha512":"6f21b7bfe462fb14c7e2254061fa39c01986418ca1208e9e7e05776bf44c3132b6a37bc5e92e10de1dd93a9f8cbecf477f0b5fbb66fbb182754def51c46eac3d","ssdeep":"96:5kJQYYyI5gXmRb0hvlQNCVZIr2g56W/picOiEmT+kcy/8Z6g7sR1ph1cQ9nmfIVW:6qH5gW2WCV6r2el/sle+1X6bYg8T","tlshash":"5cd19d8297296c47fc6f09f8405ce1f673d85b260a88391e27d26f2c433d8c28a10ab1","first_seen":"2026-06-08T00:51:55.713677Z","last_seen":"2026-09-27T02:39:25.496668Z","times_seen":6,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/theme.c06034f4.css","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.551Z","timestamp":1790476618551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/theme.c06034f4.css HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fKGzTxtMFq8SAKcNWCPlqzYk4p98yoGuNpKJZ0LCS8G78cySWHC5%2F9egfsz3dXeTg3O5YuD9xo3nAtDqVUJXp%2BRUy6DeYMZ1vI9%2FCBunVNkeaqUTMQI366cZ5kiTaWnJg%3D%3D\"}]}\r\nlast-modified: Mon, 07 Sep 2026 11:19:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"6a9e9db8-35e\"\r\nage: 73480\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4171fb1fba556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1086,"mime_type":"text/css","magic":"ASCII text, with very long lines (862), with no line terminators","md5":"10ea94ae89fa82d4609d6a56e757eca0","sha1":"2a6fdd6a1cc759ee51d2bab21fb256b8a9d71836","sha256":"c06034f4af3297d1d2605f4197255ccc2857f95f7d54035533ea9bca9d92d536","sha512":"a153925e72ae0d62b67eb3a55be8826402ad609d86c40ecbefda107150bff396e33dc5470972d22879fed26cdae03c37a5875af0015b228105bea758584f785b","ssdeep":"","tlshash":"50110800e6d35b79062740ee7bd8a51e3f756a400303ed6c541b71f06b6f5df85d8505","first_seen":"2026-08-07T10:14:15.522973Z","last_seen":"2026-09-27T18:41:18.27512Z","times_seen":11,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.766Z","timestamp":1790476618766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-de.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:57:43 GMT\r\nexpires: Tue, 21 Sep 2027 15:57:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 470355\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T06:33:43.91145Z","times_seen":50085,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-7bcd01832b06.d19bddc2.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.822Z","timestamp":1790476618822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-7bcd01832b06.d19bddc2.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=4,i\r\netag: \"6a85c70c-59f9\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLkUI0Cuns6hk664Fat3%2Fe%2BrFaTo19ASCGOlREtTdEvM19iTFxCzl1d4tTohIACRC7Q9%2BxbwI0MAfXAZq6FcTC764oc7Gwh7rxzsCI3TKiOBIHUlkakx8sReMlT9kSriCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abd556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23033\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":23798,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x242, components 3","md5":"7cf349382c74e7b66e1106e9be8da3dc","sha1":"de1920cd49e264570e30341bff75e18d6cdb532c","sha256":"d19bddc272a020bd7a0d6d5c8d5041437ca3d953da28a3b2bf4dd7d350cb9a23","sha512":"041fc0c02568d61ac93dddce4a40a991ede323797d9aef99e91f2834bd628589bcf38bec0addf580989824be4e14da970c3629c0e1a0768f30a1fade73810601","ssdeep":"384:vTmjss2w0JJD/uaTky09jztDMOEFaLnHY/lhrp7kvke7nMAo/oz2oNi+0pxbyB:Kjss2w8JLuy09jBDMO1HY/17k37Mf/oL","tlshash":"3ba2e06e4c62ab60e1570934ade2811649cb5b47c8cda04de59db7c8ae3f3d1f7c409d","first_seen":"2026-09-27T02:37:38.149934Z","last_seen":"2026-09-27T02:39:25.468801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-f0164bfebd12.4c608fb2.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.827Z","timestamp":1790476618827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-f0164bfebd12.4c608fb2.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:01 GMT\r\npriority: u=4,i\r\netag: \"6a85c70d-7fea\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwJjhyEI5kffWRrhqSbN2jHWfZwfxWh7myNKob57LxAssCKWqhqTEH%2Bf5Qc5AHGYt0XribHbSheWP17U6dUK6FCtXPFyrFyoeAPBxPDox0gyAXWwqpRCaResWjqCXGiX4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abdf56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32746,"size_decoded":33507,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"d336108599a35c24e821362dc4aa46cd","sha1":"681a3f76e62474b43ba5cdc35a3b875dfc5cc214","sha256":"4c608fb2dcd19b611c4e35be5980074f9fd18cd4f2f8eea51c3219a11a2dc780","sha512":"cb8eea3e4ca2493b5bea601f124e06fd92634bf7d72bf1f7ad9f95e4b4b50bf211ee469b009132791389044b9c10250b21342247e93c0b87f75d9bc68993c57e","ssdeep":"768:fbiiR7tFD7smhUlHfGtVdKwfb+G9HcoKnmYOPl3vQv/5kua3u66Xf5gu:f+gTqlHgYwz+MknmPd34v/5YKf5f","tlshash":"fae2e1f84aab22fc36b0676b70a3ab346e52f87d3f9f595012ce71d91d6a0414681e05","first_seen":"2026-09-27T02:37:38.151289Z","last_seen":"2026-09-27T02:39:25.481112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/player-00995d14f988.545a0993.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.841Z","timestamp":1790476618841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/player-00995d14f988.545a0993.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 14:33:03 GMT\r\npriority: u=4,i\r\netag: \"6a7f271f-1b01\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wd6mb%2FTnDns%2BpDzN0Bq84C640qKpFklDEoSeBwDzSwNRVOFgb9CaugZ0u8nCbY%2FZ1wKfEQ7pZ5LO2lGRRC1XGZ6QiZJb23K2egJydg7mzv%2FcUIT8jNyWlkM0ofq7qqMtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3cbe756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6913,"size_decoded":7679,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"131686cfb0246d25d1e1d3b499161fef","sha1":"751c85ff3199dabe47cd7de3503ce2e8b6beb56d","sha256":"545a0993efa1113732f90a8071a7ec1fa845b0a8e04b8642ad08a11dea758998","sha512":"bb968d7395afc722be409e033d6c3c5ab29ec6389c5a86df94cb2dd27be84136e417558085759a0c3e8418523a81c98281d69e4e3e34f1c34162dd0750c54bdb","ssdeep":"192:l3AC6bcPUy0iKY0Wru2+SYKh+1iB0MF+YlgW:WlQPrfOjKhBboE","tlshash":"89e17e690fc36610d82c2638611b2b16b7a695007f4636e73d60b972eb2e9d14bc45bf","first_seen":"2025-10-26T01:21:03.246616Z","last_seen":"2026-09-27T02:39:25.469711Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/favicon-96x96.png","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:59.104Z","timestamp":1790476619104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\npriority: u=6,i=?0\r\netag: \"6931d576-29db\"\r\nexpires: Mon, 27 Sep 2027 02:36:59 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opihREjepsbAOlkk7pN6SZ%2FHwarxG0gsm2fWvydxUjWsMg4y%2FnkjZGkkRAjmuG%2BnY3L%2BVMvQasjQZc0Qyyrdmj6SCnp6zjw%2Be4GfW4Rl0jwtWdSzZnqanrci9pN5jIXzwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb56c4056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10715\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10715,"size_decoded":11475,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"182514122e9e227f781f6a8fe95a751b","sha1":"73929440eade5d7ecc96472ba1affc694f18100f","sha256":"c409bef0136cf636108fb10dfc589b7108b2ea9c583a085bce8c97ca6e6f7ce0","sha512":"b487266aae315b01f9c28208877961b7c31fda6de006978c5aa4abd75423749fe0e34dbf61a13738dd9712edf4655acf8e92132a4c1b75cd2352d9f4b46631e3","ssdeep":"192:EyQkfr6b1GeJi/J1nYraNvI6xEeLoYlL7dA2pp1zdAqpS/bAr5vouOs7v45Ap+:EKrcmJ1np3xEelLJA4plSYo1sd+","tlshash":"cf22b09ecca3076dae37a43d3816782c45ae6dcc4bc460b5c93d0ffada124a04257b58","first_seen":"2026-09-08T10:02:07.208302Z","last_seen":"2026-09-27T02:39:25.475166Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-b20bfbb75115.ee524b42.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.832Z","timestamp":1790476618832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-b20bfbb75115.ee524b42.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:08:59 GMT\r\npriority: u=4,i\r\netag: \"6a85c70b-8769\"\r\nexpires: Mon, 27 Sep 2027 02:36:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdFnMvunM7sIU64ecndiV5faHtI3lk7YYEYkzbo9urpJFrUta9z81ZQBPYa40%2Fl9syfe5xcaB17kav9iAPn%2B9aGE4sgQD6rn7EN3SEtZBy6bCYlVPSoORXLpdsJa9nZ4jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34665\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34665,"size_decoded":35417,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"32379cc4659d8968493d7a48a941bddd","sha1":"039029738386e31ac26c6efa9c2f503c51752497","sha256":"ee524b42b4c7b384895bdb548e02706be5f50ae0a376acee9f96173f88cf2a54","sha512":"d6720cddc4d0f2a8c3b3cd5950bc715bbe8ce822c03a7d1a3858ac1407d5148176bebed391eeffa2127ebced8d7679f819e108fd458f97ec84b35b41ada5a070","ssdeep":"768:Z+vfzjLKHSv+L5p56xLi/rR4Q8y4XrScB+4GcyAU1sdHj5Q1CwfK:Z+vfbESve75rlUbw4G7455wfK","tlshash":"bbf2f1203b787469b4a34284714667bcb1195b277db3e7326b6046e9f0d034bbe4ab4d","first_seen":"2026-09-27T02:37:38.15968Z","last_seen":"2026-09-27T02:39:25.485844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.769Z","timestamp":1790476618769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-de.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:57:43 GMT\r\nexpires: Tue, 21 Sep 2027 15:57:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 470355\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T06:33:43.91145Z","times_seen":50085,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/site-logo.c81ff2e3.svg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.561Z","timestamp":1790476618561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/site-logo.c81ff2e3.svg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Sep 2026 11:00:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmwFCA%2Bcyey%2BMLngME96U2GPdyFC9ItWx84E8BPg0B8nNIuuaT9Zpau%2FaNhumXtgTPPquzM9v5TkBWndSknoAYcpNpBEQjI3TvuQL6vaiX92rj1YGYAWVWrl3NPeZ8nfyQ%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a9e9968-1d0c\"\r\nexpires: Sun, 26 Sep 2027 06:12:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 73480\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb20baa56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7436,"size_decoded":4312,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcf4467e9a4d0837537af5bdd03f7d73","sha1":"378765ac0ea8224d68bf0e46e0d61dd1b0423a96","sha256":"c81ff2e3981c9e0783b8e58228dc3e1303d427b25e2da9af233b188fea44d398","sha512":"16d92058e1df73e8103cb7140dcfe9f4c4bfa2d8d6cd8cae6fe3ffea483598c01750d336e6b4d8fd28028615ee3baaee5bd0ea58329d3a9a590d56b3857d73ca","ssdeep":"192:SUbeXT/clnP/C0wIWwtgXpZUgozOPD+3FLd+PrJyCZN4:YXLchUwt+wgpPD+3FLd+Pr4CA","tlshash":"24e184ce3f709ef98d65cbd2fb032068792bc4ba59858e20c1559f0d649082cdea5dca","first_seen":"2026-09-27T02:37:38.162832Z","last_seen":"2026-09-27T02:39:25.494647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-b7f2f32f646a.b35df93d.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.819Z","timestamp":1790476618819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-b7f2f32f646a.b35df93d.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:08:59 GMT\r\npriority: u=4,i\r\netag: \"6a85c70b-811e\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSv41Yy1ZatqTs8sntNeSup1v213AMumDQmJSOaXP09wBcHjZOSBon4SfX%2FuPLFYXmBoM01TZWYxht8esx0dhQYzCUdYJgXl9d3WxXnZNdBG3M2tznIQzqavlMKA3dkN%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abd156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33054\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33054,"size_decoded":33817,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"82dab42d8d3352993ec9d00bea9badf6","sha1":"d5449c0b6c743f90f3ad826121c70210059a3089","sha256":"b35df93dd00d607bcd14b1598e4f1e0f3ab97b8b2f5fec48bf761679eb334ce9","sha512":"33f9bd7f99865de30d6f6b8eddd3891c61c80b6c6f1cb76a30ce6bc8f2e4036c307087d101029da000577cdc3f40f47d43407517780bda750663376e9fe0d2e3","ssdeep":"768:AXv9PmxiyJUS3N574HtvCIF0R/dBP0gOVfT:AXFPJyyWN4tvDi/X0BBT","tlshash":"78e2f163b7cd282754a2ebf3f5d9873167f454e871fa71098187f1f9419a880eea5084","first_seen":"2026-09-27T02:37:38.164657Z","last_seen":"2026-09-27T02:39:25.484937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-3dc036734553.63df5eb3.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.824Z","timestamp":1790476618824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-3dc036734553.63df5eb3.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=4,i\r\netag: \"6a85c70c-7908\"\r\nexpires: Sun, 26 Sep 2027 06:12:20 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 73478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gS8%2FZyMwPLQE6fTjiafDl7BXukZpCVfEh3BOJujNB9ocLjs5dimMbuyDh1bDMKMV%2B0sW0GBoihRF4xTtJjMZ4HzSg9Hdk%2B%2BozTbL2CoN%2BiOP%2FeWf7vWf%2Bdp2AvS9jyVjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3abd956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30984,"size_decoded":31757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"4232bf194809dcf3a8cf38bc2b01f58b","sha1":"1364007287eff30f73ff92c8e50862b16a142e48","sha256":"63df5eb3fc7c17e2d243de666cd0d7c7e4b2ce10b1f5b7b5f810ed51dfd11df6","sha512":"e4a3165da9e88ce6dcd46157479659010a422ff745b43636c5dfb810d591f68622065a45720b905de9fed429a4128c6bae4f5ca4074b983c8b2e38f1c1988b14","ssdeep":"768:S0GetoVNKajjCOFRGVHBA/0Xf73udyGRssv+pugdZKXOQim4:nDwlXBPGXDYyGP+fKee4","tlshash":"9ad2f1b15ac97311b4b21e727725471a7910c66736faaf98df493fc00fe6aba103d242","first_seen":"2026-09-27T02:37:38.166434Z","last_seen":"2026-10-04T22:46:36.736625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800\u0026family=Share+Tech\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.548Z","timestamp":1790476618548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;600;700;800\u0026family=Share+Tech\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 02:36:58 GMT\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11133,"size_decoded":1464,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eed840a791aa174a707be365951dba6f","sha1":"7a392b81ed2196bc01f658ad51147b143277ab66","sha256":"41e50dd84c995811fea9ccd3aecda9d6b33c257e2da6dfd1b017b6c083caf430","sha512":"dea0f037c83ee563fed6a5ba6ab6c7bd7c31ae831c039d88a9a2864dc2bfb096232cf01517a5a571794fe92e70b813437cb15e8b631b997c8cfe3002a1a7e299","ssdeep":"192:zJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668ha8:9wU+ME02EQG","tlshash":"6e32a990002be804eb470cd677ce7e39ad4e61567441c5ba9bfe1cd8addbd222320b5e","first_seen":"2026-08-07T10:14:15.534866Z","last_seen":"2026-09-27T18:41:18.269995Z","times_seen":14,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":46,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-d6092011e5be.978bc0e2.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.829Z","timestamp":1790476618829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-d6092011e5be.978bc0e2.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=4,i\r\netag: \"6a85c70c-56bb\"\r\nexpires: Mon, 27 Sep 2027 02:36:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVveYWh%2FnZ8eQ0Vz9StQfvIJ%2Fu3p3FzCQ2wCLU1TVYYclu0nim4mB0nYtIE8ae8Q5w73lycsyGqOHQRXZVY1hZEIWgYnBSijHRU9th0w%2F7su8qdxHXhP4ucxTJdbb8dKEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22203\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22203,"size_decoded":22957,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"b0d980b00cb9ab47eb19e5fddfa582ca","sha1":"4081690b3c38797dfab8da28106a16f93648e25d","sha256":"978bc0e25c35398cfa8c221e1b5bd385ed39e10a74d5ade060740642fe2362fd","sha512":"a2fd5bd605691297666e22509611186f7b17e329bb563a650a5cfac428b46c9b63246592dbef3f7a9514c56856dedf406ab37ac3aaeb72ad3adaaa519e0d6db0","ssdeep":"384:J+/rfhcaviYOGyM/nwZUXaZhjjDq5w52+9EV7g4VHqrGn:J+/rfaroNaZh+5wQ+9E5ZKrGn","tlshash":"76a2e1ffd1ced642e6f10161156e09c061a4a25f171eab5af2aeddd20e6238292b1e03","first_seen":"2026-09-19T07:45:20.404284Z","last_seen":"2026-09-27T02:39:25.489032Z","times_seen":4,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-5ea6ed753ede.9b61882e.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.836Z","timestamp":1790476618836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-5ea6ed753ede.9b61882e.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=4,i\r\netag: \"6a85c70c-44f0\"\r\nexpires: Mon, 27 Sep 2027 02:36:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nEPbzxPlkD3IqwfdKIMFo7i1qEZESyTbvgQHsrA%2BQaR3b5PuK5ihMjcG8jydCH9HdNOUN%2B680lgj5EC4KJveQDC6qoVN9H2NINFH2wIDWupCgZ4xvUCFKjeOhdMypZTZbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17648,"size_decoded":18400,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x190, components 3","md5":"8b3b8f04447079c30eced01c2f2ac03e","sha1":"9b1bed4a13d7eebbfcac7bd551e1aa6a12e9a8fe","sha256":"9b61882ea208567722001e3a973e9fcb1d08a9f6bd23e19e4b2dae9c99f08a58","sha512":"e8a69f25810c64a3ac04601ca29b9f003f66da37f7637a67de8dfa9e387465eef673281c108d072b4aa6c57900ba8ca761fef0dcad30f10b2e1898c33a2d81ca","ssdeep":"384:R99xtmGN+fG+x1qu3ZPnh5ImBlOgUc7IfvgNhHuShjO0zywtT60NfP/HG:H9PP2/x1quZhO+UAIHgF1xbuyT6A/HG","tlshash":"d682c2598067c132afec24ac21e996270512576ea3871e409b2374d5f6b0f3256fbf0b","first_seen":"2026-09-27T02:37:38.17038Z","last_seen":"2026-09-27T02:39:25.483786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/d878d9b06e58.json","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.843Z","timestamp":1790476618843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/d878d9b06e58.json HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-de.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 07 Sep 2026 11:19:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUqCXxZeALFLYwcQpFr4%2F0JpszMwv2sLH95dNX83b%2ByBk58281nJVyEiwv9Lj%2FS%2BZ498TdJ%2FTvo6DqLfZUdff6LPI0%2FAfNzvM5lafQV4S9vih7GLGNPS6Q0hFgxNeoWnzw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a9e9db9-3b93\"\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3cbe956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15251,"size_decoded":6347,"mime_type":"application/json","magic":"JSON text data","md5":"eee69cea29e6c3c8f28e2d46bf9219a3","sha1":"20de1cbeac71858a74efd2c5e0d472d548f1141a","sha256":"7956a68f6e7077a71f13f3762d08be2a8cf03d7fe616766ff369d2e9dcb259d9","sha512":"e101526d71cc52b57d03355c8633942467642e7afb090f4c5368b55e4e31702322c6bf9257f8bc3316a5a52bd875bff012c01e4a257f1dc6134dd5e012596aca","ssdeep":"384:PI5JByIVjnRtVlH0J84GunGPZRk1kCYLidCrUtFtGFgSk9WsZ2sfm3THtwaDc+qS:OUBlvLz3awhMlF7MJSKtDmr","tlshash":"0562e74598210cff47393d85a49bb5e9309037916bc4d73ca828fa7d646eda7a032d3a","first_seen":"2026-09-27T02:37:38.172533Z","last_seen":"2026-09-27T02:39:25.472613Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:36:57.879Z","timestamp":1790476617879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 07 Sep 2026 11:19:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Rp85JK4cO38E4FnCJO03sn%2B98BMI7mQug2XkRLIV8jdYhEAFgnUtk6A%2Fm4NWpr5MsN37MyKWEl9Kd%2B36bTaFSTPehk6uADi2R1LWmsjE7mnk9ddJQ7LnQdgE9VgSdQC4g%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=60\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a4171fadeb8756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99933,"size_decoded":27487,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65520)","md5":"32c3e435e8ef58eecbe194375d0bbe9c","sha1":"94b169b3daa63ea669534239597a0c62826c3ca6","sha256":"119cb7fd44dce261841d9a929fd6b4e7b743369ca658211d934a4dcf0a88fc4e","sha512":"cab7d9426b1257ff6e316e7cf3ebe4ac952b73aef1b5a62ed1f0f31f66af4aec8d3f4c016102b9823a992695790da7ded0cdd54b55f7d7458446a20af3ea6dd3","ssdeep":"1536:0bebdeL+em5eBtebAeYhe5Yeqse46enEeS0eoMeXog90ePueJDegCe50e5PeVZeV:lo8LJLhu3xnTDu7z4ruf5ymt","tlshash":"03a3f86360d2622b812747cd7206fb2636aaf31dc6491231c4aee3b3a74dd3d386d46d","first_seen":"2026-09-27T02:37:38.174607Z","last_seen":"2026-09-27T02:37:38.174607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.763Z","timestamp":1790476618763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-de.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:57:43 GMT\r\nexpires: Tue, 21 Sep 2027 15:57:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 470355\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T06:33:43.91145Z","times_seen":50085,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-cdee6d1e15e3.6ed8b2aa.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:36:58.831Z","timestamp":1790476618831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-cdee6d1e15e3.6ed8b2aa.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:36:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:01 GMT\r\npriority: u=4,i\r\netag: \"6a85c70d-677c\"\r\nexpires: Mon, 27 Sep 2027 02:36:58 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sj8WXIDKkUnfoa%2BWOCbGOUqc%2FrkftnIk67s%2BePkenDYeq%2FaHGFkjiIw3%2BiB1e4NxGul0sJJ%2BguVZrrNbwPK7ZFRgBMzyh6zf9Jir%2B8fYk%2FzBCP3mn3q4u6DQeJgjPwB8CA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4171fb3bbe156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26492,"size_decoded":27256,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3","md5":"ee3e5336068997114d656549a722ea44","sha1":"dfd60c7a3df3f5e189224494c9990280dc826677","sha256":"6ed8b2aa358b9d8e3f02d498e78b8d9ec9d5b95a72ede2279a6e0291527d59e3","sha512":"5749762792e71d30c80dd50a0503875bfae497cc9de7f25a06c8890c07bd0214f92d35838b86838b080209a8401b809b91ecf8fd69a8d24ce2fe2dc74addad41","ssdeep":"384:ejP6xBV6XPfFM6xE+6BiMAFvtEwT5i1BEbNI0o5WRfVPMBuHKBxnI4aYCBXpVuzh:ejP6xEcBRAteaE1E5MwqQ4oBZVuP+a1n","tlshash":"78c2e18d92884fa238847cd1efc085de2d20e7a3afcd65e256fca1d4c634dca674571a","first_seen":"2026-09-27T02:37:38.17701Z","last_seen":"2026-09-27T02:39:25.482801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-de.com/assets/game-68fe03599a79.27cac272.jpg","fqdn":"rainbet-de.com","domain":"rainbet-de.com","tld":"com"},"ip":{"addr":"104.21.37.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-de.com/","date":"2026-09-27T02:37:14.535Z","timestamp":1790476634535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-de.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:34:54 GMT","end":"Tue, 01 Dec 2026 17:33:20 GMT"},"fingerprint":{"sha1":"3F:3A:93:10:B4:40:83:6D:00:A1:6F:FC:E3:FB:32:1B:47:8C:E5:47","sha256":"98:1A:54:18:15:9C:5B:E2:C9:91:07:F9:D6:2D:0A:2A:27:7B:47:0A:64:3C:66:C2:2E:4B:80:D6:01:10:A8:5C"}}},"request":{"raw":"GET /assets/game-68fe03599a79.27cac272.jpg HTTP/1.1\r\nHost: rainbet-de.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-de.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbet-de.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:37:14 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 15:09:00 GMT\r\npriority: u=5,i\r\netag: \"6a85c70c-637d\"\r\nexpires: Mon, 27 Sep 2027 02:37:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvpPIJEw6qx47mAp9MdyA2bHXgr5ib%2BAMY0ss1DSMqulFYckrtBb3Y1AxnXU1ZkC5WN5CCW8bM%2FoMTWp2h8RljiVZU8if3vsoudj6ue4McDMQ3x0TbE%2FNfJdD0j9fGOrAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4172015df9056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25469\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25469,"size_decoded":26223,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x210, components 3","md5":"8c08e044c356b33c536916ad221aea6e","sha1":"a2678a29bc734dd9ec2f994e5638e38bb4a02f09","sha256":"27cac272b3f12effb5a40bd08b0f2315fa67a6766e95f69d791eb0f50aa36fb8","sha512":"9b53e64ea2dd070bd56dc405ecd3cce9f076d2a84cc3acbb03d6b079170d91f7244a0a8877ad547408f22e511f2ec7a47792653d97047480a3463c11f2818828","ssdeep":"768:4Im50zb+eYNaeU9akraUG42gv+Uy7KvTZcj:4Ip+eiafTG4p+U1TZS","tlshash":"62b2e19edb97668a43b130e791b0c0a35499a741c79c501df644aecbd18d3b93fc88d3","first_seen":"2026-09-27T02:37:38.178589Z","last_seen":"2026-09-27T02:37:38.178589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"rainbet-de.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}